CVE-2021-37202

Опубликовано: 14 сент. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:siemens:nx_1980:*:*:*:*:*:*:*:*

Версия до 1984 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:*

Версия до se2021 (исключая)

cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack2:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack3:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack4:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack5:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack6:*:*:*:*:*:*

cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack7:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00448

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

GHSA-pfcx-4587-hw8m

github

больше 3 лет назад

A vulnerability has been identified in NX 1980 Series (All versions < V1984). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this vulnerability to execute code in the context of the current process.

BDU:2021-04782