An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf | Patch Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf | Patch Third Party Advisory |
| https://www.opendesign.com/security-advisories | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-218/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-21-223/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-21-224/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-21-244/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-21-245/ | Third Party Advisory VDB Entry |
| https://www.zerodayinitiative.com/advisories/ZDI-21-246/ | Third Party Advisory VDB Entry |
Configurations
History
08 Apr 2022, 13:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - Patch, Third Party Advisory | |
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:* |
10 Mar 2022, 17:41
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2021-01-18 08:15
Updated : 2024-02-04 21:23
NVD link : CVE-2021-25175
Mitre link : CVE-2021-25175
CVE.ORG link : CVE-2021-25175
JSON object : View
Products Affected
siemens
- teamcenter_visualization
- comos
- jt2go
opendesign
- drawings_software_development_kit
CWE
CWE-704
Incorrect Type Conversion or Cast