SSA-208530 — SSA-208530: File parsing vulnerabilities in IFC adapter in NX

Summary

Siemens NX is affected by two vulnerabilities that could be triggered when the application reads ifc files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary code execution on the target host system.

Siemens has released updates for NX and recommends to update to the latest version to fix the vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.

Vulnerabilities 2

Unscored —

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021

Revision history

2021-09-14 #1
Publication Date

References

SSA-208530: File parsing vulnerabilities in IFC adapter in NX - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf
SSA-208530: File parsing vulnerabilities in IFC adapter in NX - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-208530.txt