medium5.5
CVE-2021-37178
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7).
Impact
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Solid Edge Se2021 Firmware | before se2021mp7 |