[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDWw9eOGTPd965V9DNKeM06JIEvohEHyNl-bvaGfIpGw":3,"g5a-risk:CVE-2020-26991":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":72,"weaknesses":73,"weaknessesCount":52,"isActivelyExploited":88,"cisaInfo":27,"otxData":27,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":126,"notableEvents":127},"CVE-2020-26991","What is CVE-2020-26991?","A vulnerability has been identified in JT2Go (All versions \u003C V13.1.0.2), Teamcenter Visualization (All versions \u003C V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing ASM files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11899)","A vulnerability has been identified in JT2Go (All versions \u003C V13.1.0.2), Teamcenter Visualization (All versions \u003C V13.1.0.2). Affected applications lack prop...","2021-01-12T21:15:17.323","2022-10-06T19:42:47.88",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.03991,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"siemens","jt2go","*","cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":47,"criteria":51,"vulnerable":4},"teamcenter_visualization","cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",2,[54,59,63,66],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-622830.pdf","Siemens",[58],"Vendor Advisory",{"url":60,"source":56,"tags":61},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-663999.pdf",[62,58],"Patch",{"url":64,"source":56,"tags":65},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-695540.pdf",[62,58],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-21-053\u002F","Zerodayinitiative",[70,71],"Third Party Advisory","VDB Entry",4,[74,82],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable","Base","Simple",{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":80,"structure":81},"CWE-822","Untrusted Pointer Dereference","The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.","An attacker can supply a pointer for memory locations that the product is not expecting. If the pointer is dereferenced for a write operation, the attack might allow modification of critical state variables, cause a crash, or execute code. If the dereferencing operation is for a read, then the attack might allow reading of sensitive data, cause a crash, or set a variable to an unexpected value (since the value will be read from an unexpected memory location).\nThere are several variants of this weakness, including but not necessarily limited to:","Incomplete",false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2020-26991? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-26991, a high severity cyber security vulnerability from 2021. A vulnerability has been identified in JT2Go (All versions ...","CVE-2020-26991, CVE-2020-26991 vulnerability, CVE-2020-26991 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, siemens security, jt2go vulnerability, teamcenter_visualization vulnerability","\u002Fwhat-is\u002Fcve-2020-26991",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-26991","Cybersecurity","CVE-2020-26991, CVE-2020-26991 vulnerability, CVE-2020-26991 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":27,"Negate":27,"Nodes":117},[118],{"Operator":119,"Negate":27,"CPEMatch":120},"OR",[121,124],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":123,"VersionEndIncluding":27},"662917EE-CC9D-4BFC-B87B-97AB81C68DB8","13.1.0.2",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":123,"VersionEndIncluding":27},"94F3C436-4C43-4B3E-B7CD-A4938926E255",[],[],{"lastModified":11,"cacheTime":129,"version":33},1793207783987,{"score":131,"band":132,"action":133,"scoredAt":134},48,"Medium","Plan remediation","2026-07-01T10:25:54.057298+00:00"]