A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf | Patch Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
18 Nov 2021, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack2:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack7:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack5:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack3:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack4:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack6:*:*:*:*:*:* |
|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf - Patch, Vendor Advisory |
28 Sep 2021, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations. | |
| References |
|
24 Sep 2021, 15:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:nx_1980:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 7.1 |
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf - Patch, Vendor Advisory |
14 Sep 2021, 11:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-14 11:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-37203
Mitre link : CVE-2021-37203
CVE.ORG link : CVE-2021-37203
JSON object : View
Products Affected
siemens
- solid_edge
- nx_1980
CWE
CWE-125
Out-of-bounds Read