CVE-2021-41539

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13773...

CVE-2021-41538

CVE-2021-41538 : Siemens Solid Edge/NX OBJ parsing uninitialized pointer information disclosure. Affected products and versions include: NX 1953 Series (all versions < V1973.3700) and NX 1980 Series (all versions < V1988); Solid Edge SE2021 (all versions = V1973.3700, NX 1980 >= V1988, a...

CVE-2021-41538

A vulnerability has been identified in NX 1953 Series All versions V1973.3700, NX 1980 Series All versions V1988, Solid Edge SE2021 All versions SE2021MP8. The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied...

CVE-2021-41537

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13789...

CVE-2021-41537

Solid Edge SE2021 (

CVE-2021-41536

Solid Edge SE2021 (all versions before SE2021MP8) contains a use-after-free in OBJ file parsing that can lead to code execution in the affected process (ZDI-21-1120). The issue is tied to the OBJ parser’s handling of objects/files and lacks validation, enabling an attacker to trigger arbitrary co...

CVE-2021-41536

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13778...

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series All versions V1973.3700, NX 1980 Series All versions V1988, Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to...

CVE-2021-41535

Siemens Siemens NX 1953 Series (before v1973.3700), NX 1980 Series (before v1988), and Solid Edge SE2021 (before SE2021MP8) have a use-after-free vulnerability in OBJ file parsing that could allow code execution in the current process (ZDI-CAN-13771). Public disclosures (ZDI-21-1119, RH Red Hat a...

CVE-2021-41534

CVE-2021-41534 affects Siemens NX 1980 Series (all versions before v1984) and Solid Edge SE2021 (all versions before SE2021MP8). Root cause: an out-of-bounds read past the end of an allocated buffer during JT file parsing, leading to potential information disclosure within the process. Mitigation...

CVE-2021-41534

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

CVE-2021-41533

Siemens NX 1980 Series and Solid Edge SE2021 are affected by CVE-2021-41533 due to an out-of-bounds read when parsing JT files, enabling potential information disclosure within the current process. Siemens fixes are available: update NX 1980 Series to v1984+ and SE2021 to SE2021MP8+. The issue wa...

Siemens Solid Edge 资源管理错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. versions prior to Siemens Solid Edge SE2021MP8 contain a post-release reuse vulnerability when parsing OBJ files. An attacker could exploit this vulnerability to execute code in the context of the curre...

Siemens Solid Edge 资源管理错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. A post-release reuse vulnerability exists in Siemens Solid Edge versions prior to SE2021MP8 when parsing OBJ files. An attacker can exploit the vulnerability to execute code in the context of the curren...

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. buffer out-of-bounds read vulnerability exists in versions prior to Siemens Solid Edge SE2021MP8. An attacker can exploit the vulnerability to disclose information in the context of the current process...

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. information disclosure vulnerability exists in previous versions of Siemens Solid Edge SE2021MP8. An attacker could exploit the vulnerability to obtain information via specially crafted OBJ files...

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge, 3D CAD and solid modeling software Vulnerabilities: Use After Free, Out-of-bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Siemens Solid Edge 资源管理错误漏洞

Siemens Solid Edge, a 3D CAD, parametric feature and synchronous technology solid modeling software, is vulnerable to a post-release reuse vulnerability when parsing OBJ files in versions prior to Siemens Solid Edge SE2021MP8. An attacker could exploit this vulnerability to execute code in the...

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. buffer out-of-bounds read vulnerability exists in versions prior to Siemens Solid Edge SE2021MP8. An attacker can exploit the vulnerability to disclose information in the context of the current process...