JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid

An attacker could trick a user into opening a malicious JT file, which could crash the application or potentially execute arbitrary code on the workstation or engineering system. This could disrupt design workflows or compromise engineering systems used to manage OT environments.

Engineering teams and CAD/design groups at utilities and manufacturers who use Siemens JT Open, JT Utilities, or Parasolid for 3D modeling, asset design, and engineering documentation should prioritize patching. This includes design engineers, plant layout specialists, and automation engineers who work with JT format files in SCADA/DCS configuration or asset management workflows.

An attacker crafts a malicious JT file containing specially formatted data that triggers a memory corruption flaw during parsing. The attacker delivers the file to an engineer or operator (via email, file share, or supply chain compromise). When the user opens the file with a vulnerable version of JT Open, JT Utilities, or Parasolid, the application crashes or the attacker's code executes with the user's privileges.