High ICSA-21-287-06 10 CVEs

Siemens Solid Edge

Published Sep 28, 2021 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: Solid Edge SE2021

Summary

Siemens has released a new version for Solid Edge that fixes multiple file parsing vulnerabilities which could be triggered when the application reads files in IFC, JT or OBJ formats.

If a user is tricked to opening a malicious file using the affected application this could lead the application to crash, or potentially arbitrary code execution on the target host system.

Siemens recommends to update to the latest version and to limit opening of files from unknown sources in the affected products.

Vulnerabilities 10

Unscored —

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41534

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41536

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41537

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41538

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41539

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41540

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021

Revision history

2025-05-06 #2
Revision - Fixing typos
2021-09-28 #1
Publication Date

References

SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-728618.txt
SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
ICS Advisory ICSA-21-287-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-06
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B