The vulnerability of the dynamically linked library jutil.dll, a set of tools for design and simulation in Siemens Solid Edge, allows a perpetrator to execute arbitrary code.

The vulnerability of the dynamically linked library jutil.dll, which is part of the Siemens Solid Edge design and simulation tools, relates to writing beyond buffer boundaries in memory during DFT file syntax analysis. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-40501)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-40500)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

Default credentials

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

Design/Logic Flaw

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker...

CVE-2021-31343

The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker...

CVE-2021-31342

Summary of CVE-2021-31342 : The vulnerability is in the ugeom2d.dll library used by Siemens Solid Edge (SE2020 before 2020MP14 and SE2021 before SE2021MP5) where parsing of DFT files lacks proper validation, causing an out-of-bounds write past an allocated structure. Exploitation could allow code...

CVE-2021-31343

The CVE-2021-31343 issue affects Siemens Solid Edge: jutil.dll (and related ugeom2d.dll in other reportings) in Solid Edge SE2020 before 2020MP14 and SE2021 before SE2021MP5, due to improper validation of user-supplied data when parsing DFT files. This causes an out-of-bounds write past the end o...

Solid Edge SE 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Solid Edge SE 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge Vulnerabilities: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to an application crash or arbitrary code execution on the target host...

PT-2021-19362 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

Siemens Solid Edge Viewer PAR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...