Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-98jw-m4q8-f849

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability has been identified in NX 1980 Series (All versions < V1984). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.

A vulnerability has been identified in NX 1980 Series (All versions < V1984). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.

EPSS

Процентиль: 41%
0.00189
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.1
nvd
больше 4 лет назад

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.

CVSS3: 8.1
fstec
больше 4 лет назад

Уязвимость динамически подключаемой библиотеки plmxmlAdapterIFC.dll программного обеспечения для проектирования, разработки и производства продуктов Siemens NX 1980 и Siemens Solid Edge, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 41%
0.00189
Низкий

Дефекты

CWE-125