CVE-2021-34326

Summary of CVE-2021-34326 : Siemens Solid Edge/JT2Go/Teamcenter Visualization are affected by a heap-based buffer overflow in the plmxmlAdapterSE70.dll when parsing PAR files. Affected versions: JT2Go < 13.2, Solid Edge SE2021 < SE2021MP5, Teamcenter Visualization

Siemens JT2GO 缓冲区错误漏洞

Siemens Solid Edge is a group of software tools for dealing with various product development processes: 3D design, simulation, manufacturing and design management. A heap buffer overflow vulnerability exists in Siemens Solid Edge. In the affected application, the PLMXMLADATESE70.DLL library lacks...

Siemens JT2GO 缓冲区错误漏洞

Siemens Solid Edge is a group of software tools for dealing with various product development processes: 3D design, simulation, manufacturing and design management. A heap buffer overflow vulnerability exists in Siemens Solid Edge where the plmxmlAdapterSE70.dll library in the affected application...

The vulnerability of the dynamically linked library ugeom2d.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a hacker to execute arbitrary code.

The vulnerability of the dynamically linked library ugeom2d.dll, which is part of Siemens Solid Edge’s design and modeling tools, relates to the writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary...

PT-2021-20458 · Siemens · Teamcenter Visualization +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Solid Edge SE2021 versions prior to SE2021MP5 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the specified software versions. The plmxmlAdapterSE70.dll librar...

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Siemens Equipment : Solid Edge Vulnerabilities : Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an out-of-bounds write, a buffer overflow condition that may...

Siemens Jt2go 缓冲区错误漏洞

Siemens Solid Edge is a group of software tools for dealing with various product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge heap buffer overflow vulnerability. The vulnerability is due to a lack of proper validation of user-supplied data ...

PT-2021-20459 · Siemens · Solid Edge +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Solid Edge SE2021 versions prior to SE2021MP5 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the plmxmlAdapterSE70.dll library, which lacks proper validation ...

The vulnerability of the dynamically linked library jutil.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked library jutil.dll, which is part of the Siemens Solid Edge design and simulation tools, relates to writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

Siemens JT2GO和Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Solid Edge is a group of software tools for dealing with various product development processes: 3D design, simulation, manufacturing and design management. A heap buffer overflow vulnerability exists in Siemens Solid Edge. In the affected application, the PLMXMLADATESE70.DLL library lacks...

Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-40501)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-40500)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

Default credentials

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

Design/Logic Flaw

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...