ICSA-21-222-08_Siemens Solid Edge

🗓️ 10 Aug 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 101 Views

Siemens Solid Edge application is vulnerable to improper restriction of XML external entity reference, use after free, and access of uninitialized pointer, which could lead to application crashes, arbitrary code execution, and data extraction. Affected version is Solid Edge SE2021 prior to SE2021MP7. Mitigations include updating to SE2021MP7 or later version, avoiding opening files from unknown sources, and following Siemens' operational guidelines for industrial security

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2021-37178	10 Aug 202111:15	–	attackerkb
ATTACKERKB	CVE-2021-37180	10 Aug 202111:15	–	attackerkb
ATTACKERKB	CVE-2021-37179	10 Aug 202111:15	–	attackerkb
Circl	CVE-2021-37178	10 Aug 202114:37	–	circl
Circl	CVE-2021-37179	10 Aug 202114:37	–	circl
Circl	CVE-2021-37180	10 Aug 202114:37	–	circl
CNNVD	Siemens Solid Edge 资源管理错误漏洞	10 Aug 202100:00	–	cnnvd
CNNVD	Siemens Solid Edge 缓冲区错误漏洞	10 Aug 202100:00	–	cnnvd
CNNVD	Siemens Solid Edge 代码问题漏洞	10 Aug 202100:00	–	cnnvd
CNVD	Siemens Solid Edge Buffer Overflow Vulnerability (CNVD-2021-61127)	11 Aug 202100:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-222-08.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-222-08

10 Aug 2021 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 3.17.8

EPSS0.01383