CVE-2021-34328

Siemens JT2Go (<V13.2), Solid Edge SE2021 (<SE2021MP5), and Teamcenter Visualization (

CVE-2020-26989

CVE-2020-26989 affects Siemens JT2Go (all versions

CVE-2021-34327

The CVE affects Siemens Solid Edge, JT2Go, and Teamcenter Visualization with a heap-based buffer overflow in plmxmlAdapterSE70.dll when parsing ASM files. Root cause: improper validation of user-supplied data leading to an out-of-bounds write and potential code execution in the affected process. ...

CVE-2021-41535

Siemens Siemens NX 1953 Series (before v1973.3700), NX 1980 Series (before v1988), and Solid Edge SE2021 (before SE2021MP8) have a use-after-free vulnerability in OBJ file parsing that could allow code execution in the current process (ZDI-CAN-13771). Public disclosures (ZDI-21-1119, RH Red Hat a...

CVE-2022-47935

The CVE-2022-47935 issue affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). Root cause: a memory corruption vulnerability in Jt1001.dll when parsing specially crafted JT files, enabling code execution in the attacker’s context. Affects: JT Open, JT Uti...

CVE-2021-34329

Siemens JT2Go/Solid Edge/Teamcenter Visualization are affected by a heap-based buffer overflow in plmxmlAdapterSE70.dll when parsing PAR files. Impact: out-of-bounds write enabling code execution in the context of the current process. Affects JT2Go (all versions

CVE-2021-44014

CVE-2021-44014 affects Siemens JT Open (≤11.1.1.0), JT Utilities (≤13.1.1.0) and Solid Edge (≤2023). The Jt1001.dll contains a use-after-free vulnerability triggered while parsing specially crafted JT files, enabling code execution in the current process. Affected versions require updating to JT ...

CVE-2021-37202

Siemens NX 1980 Series (all versions before v1984) and Solid Edge SE2021 (before SE2021MP8) are affected by CVE-2021-37202 due to a use-after-free vulnerability in the IFC adapter when parsing user-supplied IFC files. This could allow code execution in the context of the current process. Related ...

CVE-2021-41538

CVE-2021-41538 : Siemens Solid Edge/NX OBJ parsing uninitialized pointer information disclosure. Affected products and versions include: NX 1953 Series (all versions < V1973.3700) and NX 1980 Series (all versions < V1988); Solid Edge SE2021 (all versions = V1973.3700, NX 1980 >= V1988, a...

CVE-2020-28384

The CVE-2020-28384 entry affects Siemens Solid Edge: SE2020 (before SE2020MP12) and SE2021 (before SE2021MP2). The root cause is improper validation of user-supplied data when parsing PAR files, leading to a stack-based buffer overflow. This condition could allow code execution in the context of ...

CVE-2020-28386

Siemens Solid Edge is affected by CVE-2020-28386 due to improper validation of data when parsing DFT files, causing an out-of-bounds write past an allocated structure and enabling code execution in the current process. The issue is described in ZDI-21-077 (Solid Edge Viewer) and is tied to Solid ...

CVE-2021-41537

Solid Edge SE2021 (

CVE-2020-28382

Siemens Solid Edge SE2020/SE2021 (all versions prior to SE2020MP12/SE2021MP2) are affected by a PAR-file parsing vulnerability that can cause an out-of-bounds write, enabling code execution in the context of the affected process. The issue spans Solid Edge SE products and the Solid Edge Viewer, w...

CVE-2021-41534

CVE-2021-41534 affects Siemens NX 1980 Series (all versions before v1984) and Solid Edge SE2021 (all versions before SE2021MP8). Root cause: an out-of-bounds read past the end of an allocated buffer during JT file parsing, leading to potential information disclosure within the process. Mitigation...

CVE-2021-34326

Summary of CVE-2021-34326 : Siemens Solid Edge/JT2Go/Teamcenter Visualization are affected by a heap-based buffer overflow in the plmxmlAdapterSE70.dll when parsing PAR files. Affected versions: JT2Go < 13.2, Solid Edge SE2021 < SE2021MP5, Teamcenter Visualization

CVE-2021-37203

CVE-2021-37203 concerns Siemens NX/NX 1980 Series and Solid Edge SE2021 where the plmxmlAdapterIFC.dll performs an out-of-bounds read while parsing user-supplied IFC files. This can cause a denial-of-service or memory information leakage. Affected: NX 1980 Series (all versions before V1984) and S...

CVE-2021-41533

Siemens NX 1980 Series and Solid Edge SE2021 are affected by CVE-2021-41533 due to an out-of-bounds read when parsing JT files, enabling potential information disclosure within the current process. Siemens fixes are available: update NX 1980 Series to v1984+ and SE2021 to SE2021MP8+. The issue wa...

CVE-2021-41539

CVE-2021-41539 concerns Siemens Solid Edge SE2021 (all versions before SE2021MP8) with a use-after-free in OBJ file parsing that could allow code execution in the affected process. Multiple sources (ZDI-21-1123; RH security advisory; CNVD; NVD/NVD list) describe the flaw as affecting the OBJ pars...

CVE-2021-44002

CVE-2021-44002 affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). The Jt1001.dll suffers an out-of-bounds write past an allocated structure while parsing crafted JT files, potentially enabling code execution in the current process. Mitigations from Sie...

CVE-2020-28381

Siemens Solid Edge PAR file parsing contains an out-of-bounds write due to insufficient input validation, enabling possible remote code execution in the current process. Affected products include Solid Edge SE2020 (< SE2020MP12) and SE2021 (

CVE-2021-41540

Solid Edge SE2021 before MP8 contains a use‑after‑free flaw when parsing OBJ files, allowing code execution in the current process (CVE-2021-41540; ZDI-21-1124). Affected product: Solid Edge SE2021 (all versions

CVE-2021-27380

Siemens Solid Edge is affected: PAR-file parsing vulnerability in Solid Edge SE2020 (< SE2020MP13) and SE2021 (

CVE-2022-47967

CVE-2022-47967 affects Siemens Solid Edge prior to V2023 MP1. The DOCMGMT.DLL contains a memory corruption flaw triggered when parsing file formats such as PAR, ASM, and DFT, potentially allowing code execution in the context of the current process. The vulnerability is rated CVSS v3.1 base score...

CVE-2020-28387

CVE-2020-28387 affects Siemens Solid Edge SE2020 before SE2020MP13 and SE2021 before SE2021MP3. The issue arises when opening specially crafted SEECTCXML files; the XML parser can process external entities (XXE) due to insufficient restrictions, enabling disclosure of arbitrary files to an attack...

CVE-2020-28385

Siemens Solid Edge vulnerabilities CVE-2020-28385 affect Solid Edge SE2020 (before SE2020MP13) and SE2021 (before SE2021MP4). The root cause is improper validation of user-supplied data when parsing DFT files, leading to an out-of-bounds write past the end of an allocated structure and potential ...

CVE-2021-41536

Solid Edge SE2021 (all versions before SE2021MP8) contains a use-after-free in OBJ file parsing that can lead to code execution in the affected process (ZDI-21-1120). The issue is tied to the OBJ parser’s handling of objects/files and lacks validation, enabling an attacker to trigger arbitrary co...

CVE-2021-27381

Solid Edge CVE-2021-27381 affects Solid Edge SE2020 (before MP13) and SE2021 (before MP3). The flaw is an out-of-bounds read when parsing PAR files, enabling an attacker to execute code in the current process. Remediation: update to Solid Edge SE2020 MP13 or later, and SE2021 MP3 or later (note: ...

CVE-2023-39185

CVE-2023-39185 affects Siemens Solid Edge SE2023: all versions prior to V223.0 Update 7 are vulnerable to an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, which could allow code execution in the process context. Siemens has released V223.0 Up...

CVE-2023-39186

CVE-2023-39186 affects Siemens Solid Edge SE2023: all versions before V223.0 Update 7 are vulnerable to an out-of-bounds read past the end of an allocated structure while parsing specially crafted DFT files, potentially allowing code execution in the current process. The issue is tied to Solid Ed...

CVE-2023-39184

Siemens Solid Edge SE2023 is affected. All versions prior to V223.0 Update 7 expose an out-of-bounds read while parsing specially crafted PSM files, allowing code execution in the current process. The issue is confirmed in CVE-2023-39184 and is addressed by updating to V223.0 Update 7 or later. S...

CVE-2023-39181

CVE-2023-39181 affects Siemens Solid Edge SE2023 (all versions before V223.0 Update 7). The vulnerability is an out-of-bounds write past the end of an allocated buffer during parsing of a specially crafted PAR file, potentially allowing code execution in the current process. Affected product: Sol...

CVE-2023-39188

Siemens Solid Edge SE2023 is affected by CVE-2023-39188 (Solid Edge SE2023: all versions before V223.0 Update 7) due to an out-of-bounds read past the end of an allocated structure while parsing DFT files. This vulnerability could allow code execution in the current process. Siemens has released ...

CVE-2023-39187

Solid Edge SE2023 is affected by CVE-2023-39187 (and related entries) due to an out-of-bounds read past the end of an allocated structure while parsing DFT files. Affected: all versions prior to V223.0 Update 7. Root cause: out-of-bounds read in the DFT parsing path could allow code execution in ...

CVE-2023-39182

Solid Edge SE2023 is affected by CVE-2023-39182: an out-of-bounds read past the end of an allocated structure while parsing DFT files in all versions before V223.0 Update 7. The vulnerability could allow code execution in the current process. Siemens provides a fix in V223.0 Update 7 and recommen...

CVE-2023-39183

Solid Edge SE2023 is affected (all versions prior to V223.0 Update 7) by CVE-2023-39183 due to an out-of-bounds read past the end of an allocated structure while parsing specially crafted PSM files, potentially allowing code execution in the current process. Siemens provides a fix in V223.0 Updat...