CVE-2021-41538

🗓️ 28 Sep 2021 11:12:32Reported by siemensType

Vulnerability in NX 1953 and NX 1980 Series, Solid Edge SE2021 allows info disclosure via user-supplied OBJ files. (CVE-2021-41538

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-41538	28 Sep 202116:35	–	circl
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	28 Sep 202100:00	–	cnnvd
CNVD	Siemens Solid Edge Information Disclosure Vulnerability	29 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-41538	28 Sep 202111:12	–	cvelist
EUVD	EUVD-2021-28556	3 Oct 202520:07	–	euvd
ICS	Siemens Solid Edge	28 Sep 202100:00	–	ics
ICS	Siemens NX OBJ Translator	9 Nov 202100:00	–	ics
NVD	CVE-2021-41538	28 Sep 202112:15	–	nvd
Prion	Information disclosure	28 Sep 202112:15	–	prion
RedhatCVE	CVE-2021-41538	22 May 202518:45	–	redhatcve

NVD

Node

siemens solid_edgeRange<se2021

siemens solid_edgeMatchse2021-

siemens solid_edgeMatchse2021maintenance_pack1

siemens solid_edgeMatchse2021maintenance_pack2

siemens solid_edgeMatchse2021maintenance_pack3

siemens solid_edgeMatchse2021maintenance_pack4

siemens solid_edgeMatchse2021maintenance_pack5

siemens solid_edgeMatchse2021maintenance_pack6

siemens solid_edgeMatchse2021maintenance_pack7

Node

siemens nx_1984_firmwareRange<1984

AND

siemens nx_1984Match-

Node

siemens nx_1988_firmwareRange<1984

AND

siemens nx_1988Match-

Node

siemens nx_1957_firmwareRange<1973.3700

AND

siemens nx_1957Match-

Node

siemens nx_1961_firmwareRange<1973.3700

AND

siemens nx_1961Match-

Node

siemens nx_1965_firmwareRange<1973.3700

AND

siemens nx_1965Match-

Node

siemens nx_1969_firmwareRange<1973.3700

AND

siemens nx_1969Match-

[
  {
    "product": "NX 1953 Series",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1973.3700"
      }
    ]
  },
  {
    "product": "NX 1980 Series",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1988"
      }
    ]
  },
  {
    "product": "Solid Edge SE2021",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < SE2021MP8"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1122/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf

21 Nov 2024 06:26Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.13.3

CVSS 24.3

EPSS0.0021

CWE-824

cve-2021-41538 vulnerability nx 1953 nx 1980 solid edge se2021 information disclosure uninitialized pointer obj files memory locations zdi-can-13770 nvd