Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge, 3D CAD and solid modeling software Vulnerabilities: Use After Free, Out-of-bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2021-37202

Siemens NX 1980 Series (all versions before v1984) and Solid Edge SE2021 (before SE2021MP8) are affected by CVE-2021-37202 due to a use-after-free vulnerability in the IFC adapter when parsing user-supplied IFC files. This could allow code execution in the context of the current process. Related ...