CVE-2021-27490

🗓️ 27 May 2021 16:08:18Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 56 Views

Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read

Reporter	Title	Published	Views	Family All 9
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	12 May 202100:00	–	cnnvd
CNVD	Siemens Solid Edge Buffer Overflow Vulnerability	14 May 202100:00	–	cnvd
Cvelist	CVE-2021-27490	27 May 202116:08	–	cvelist
EUVD	EUVD-2021-14244	7 Oct 202500:30	–	euvd
ICS	Datakit Libraries bundled in Luxion KeyShot	25 May 202100:00	–	ics
NVD	CVE-2021-27490	27 May 202117:15	–	nvd
Prion	Out-of-bounds	27 May 202117:15	–	prion
RedhatCVE	CVE-2021-27490	27 Mar 202614:25	–	redhatcve
Zero Day Initiative	(0Day) Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability	12 May 202100:00	–	zdi

NVD

Vulners

Node

datakit crosscadwareRange≤2021.1

luxion keyshotRange≤10.1

Node

siemens solid_edge_se2020_firmware

AND

siemens solid_edge_se2020Match-

Node

siemens solid_edge_se2021_firmware

AND

siemens solid_edge_se2021Match-

[
  {
    "product": "Datakit Software libraries embedded in Luxion KeyShot software",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-145-01
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-566/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf

21 Nov 2024 05:58Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 3.17.8

EPSS0.00404

CWE-125