CVE-2021-41534

🗓️ 28 Sep 2021 11:12:28Reported by siemensType

Vulnerability in NX 1980 Series & Solid Edge SE2021 allows out of bounds read in JT file

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-41534	28 Sep 202116:35	–	circl
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	28 Sep 202100:00	–	cnnvd
CNVD	Siemens Solid Edge Buffer Out-of-Bounds Read Vulnerability (CNVD-2021-75889)	29 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-41534	28 Sep 202111:12	–	cvelist
EUVD	EUVD-2021-28552	3 Oct 202520:07	–	euvd
ICS	Siemens Solid Edge	28 Sep 202100:00	–	ics
ICS	Siemens NX JT Translator	9 Nov 202100:00	–	ics
NVD	CVE-2021-41534	28 Sep 202112:15	–	nvd
Prion	Out-of-bounds	28 Sep 202112:15	–	prion
Zero Day Initiative	Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	30 Sep 202100:00	–	zdi

NVD

Node

siemens solid_edgeRange<se2021

siemens solid_edgeMatchse2021-

siemens solid_edgeMatchse2021maintenance_pack1

siemens solid_edgeMatchse2021maintenance_pack2

siemens solid_edgeMatchse2021maintenance_pack3

siemens solid_edgeMatchse2021maintenance_pack4

siemens solid_edgeMatchse2021maintenance_pack5

siemens solid_edgeMatchse2021maintenance_pack6

siemens solid_edgeMatchse2021maintenance_pack7

Node

siemens nx_1984_firmwareRange<1984

AND

siemens nx_1984Match-

Node

siemens nx_1988_firmwareRange<1984

AND

siemens nx_1988Match-

[
  {
    "product": "NX 1980 Series",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1984"
      }
    ]
  },
  {
    "product": "Solid Edge SE2021",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < SE2021MP8"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1118/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf

21 Nov 2024 06:26Current

3.6Low risk

Vulners AI Score3.6

CVSS 3.13.3

CVSS 24.3

EPSS0.0021

CWE-125