low3.3
CVE-2021-41533
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8).
Impact
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13565).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Solid Edge | before se2021 Version se2021 |
| Siemens | Nx 1984 Firmware | before 1984 |
| Siemens | Nx 1988 Firmware | before 1984 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf
- https://www.zerodayinitiative.com/advisories/ZDI-21-1117/
- https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf
- https://www.zerodayinitiative.com/advisories/ZDI-21-1117/