Siemens Solid Edge

🗓️ 28 Sep 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 31 Views

Siemens Solid Edge 3D CAD, Solid modeling software. Vulnerabilities: Use After Free, Out-of-bounds Read, Access of Uninitialized Pointe

Reporter	Title	Published	Views	Family All 111
BDU FSTEC	The vulnerability of the IFC Adapter component of Siemens NX software for product design, development, and manufacturing allows a perpetrator to execute arbitrary code.	29 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the dynamically linked library plmxmlAdapterIFC.dll of the software for Siemens NX 1980 and Siemens Solid Edge design, development, and production software allows a attacker to cause service failures or gain unauthorized access to protected information.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.	13 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.	13 Oct 202100:00	–	bdu_fstec
Circl	CVE-2021-37202	14 Sep 202114:21	–	circl
Circl	CVE-2021-37203	14 Sep 202114:20	–	circl
Circl	CVE-2021-41533	28 Sep 202116:35	–	circl

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-728618.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-728618.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-287-06.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-287-06
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

28 Sep 2021 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

CVSS 3.17.8

EPSS0.00678

siemens solid edge 3d cad solid modeling use after free out-of-bounds read access of uninitialized pointer cve-2021-37202 cve-2021-37203 cve-2021-41533 cve-2021-41534 cve-2021-41535