Lucene search
+L

1394 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/05/12 12:0 a.m.50 views

(0Day) Siemens Solid Edge Viewer PRT File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02029EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/05/12 12:0 a.m.12 views

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. An out-of-bounds write vulnerability exists in Siemens Solid Edge Viewer CATPart parsing, which allows remote attackers to exploit the vulnerability by submitting a special file request, tricking the user into parsing it, and either...

7.8CVSS6AI score0.01982EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2021/05/12 12:0 a.m.50 views

(0Day) Siemens Solid Edge Viewer CATPart File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.01982EPSS
SaveExploits0
OSV
OSV
added 2021/04/22 9:15 p.m.7 views

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

7.8CVSS5.9AI score0.0144EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/22 9:15 p.m.4 views

CVE-2021-27382

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...

7.8CVSS7.5AI score
SaveExploits0References3
NVD
NVD
added 2021/04/22 9:15 p.m.31 views

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

7.8CVSS0.0144EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/22 9:15 p.m.26 views

CVE-2021-27382

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...

7.8CVSS0.02303EPSS
SaveExploits0References3
NVD
NVD
added 2021/04/22 9:15 p.m.20 views

CVE-2020-26997

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

7.8CVSS0.01044EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/22 9:15 p.m.8 views

CVE-2020-26997

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

7.8CVSS7.2AI score0.01044EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/22 9:15 p.m.24 views

Code injection

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

6.8CVSS7.5AI score0.01044EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/04/22 9:15 p.m.3 views

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

7.8CVSS7.4AI score0.0144EPSS
SaveExploits0References3
Prion
Prion
added 2021/04/22 9:15 p.m.23 views

Stack overflow

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...

6.8CVSS7.6AI score0.02303EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2021/04/22 9:15 p.m.28 views

Default credentials

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

6.8CVSS7.7AI score0.0144EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2021/04/22 8:42 p.m.66 views

CVE-2021-27382

CVE-2021-27382 affects Siemens Solid Edge (SE2020 before MP13, SE2020 before MP14, SE2021 before MP4). The issue is a stack-based buffer overflow in PAR file parsing due to inadequate validation of user-supplied data, enabling code execution in the context of the current process. Public advisorie...

7.8CVSS7.6AI score0.02303EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2021/04/22 8:42 p.m.31 views

CVE-2021-27382

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...

7.8AI score0.02303EPSS
SaveExploits0References3
CVE
CVE
added 2021/04/22 8:42 p.m.73 views

CVE-2021-25678

Siemen s Solid Edge PAR File parsing vulnerability CVE-2021-25678 affects Solid Edge SE2020 (before MP13) and SE2021 (before MP4). The issue is due to improper validation of user-supplied data when parsing PAR files, causing an out-of-bounds write past the end of an allocated structure and enabli...

7.8CVSS7.7AI score0.0144EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/04/22 8:42 p.m.33 views

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

7.8AI score0.0144EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/04/22 8:42 p.m.27 views

CVE-2020-26997

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

7.5AI score0.01044EPSS
SaveExploits0References2
CVE
CVE
added 2021/04/22 8:42 p.m.105 views

CVE-2020-26997

CVE-2020-26997 affects Siemens Solid Edge (SE2020/SE2021) where PAR file parsing lacks input validation, allowing pointer dereference and potential code execution. Affected products: Solid Edge SE2020 (< SE2020MP13/MP14) and SE2021 (

7.8CVSS7.5AI score0.01044EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/04/13 12:0 a.m.16 views

Siemens Solid Edge PAR File Stack Buffer Overflow Vulnerability

Siemens Solid Edge is a 3D CAD software. The software can be used in the industries of part design, assembly design, sheet metal design, welding design, and so on. A stack buffer overflow vulnerability exists in the Siemens Solid Edge PAR file heap. The vulnerability is due to a lack of proper...

7.8CVSS7.4AI score0.02303EPSS
SaveExploits0References1
Rows per page
Query Builder