Skip to content
OpenAdvisories
High SSA-574442 5 CVEs

SSA-574442: Multiple PAR and DFT File Parsing Vulnerabilities in Solid Edge

Published Apr 13, 2021 · Updated Jun 8, 2021 · Revision 2

Vendor: Siemens Product: Solid Edge SE2020 Product: Solid Edge SE2021

Summary

Siemens has released a new version for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT extensions). If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system.

Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources.

Vulnerabilities 5

Revision history

  1. #2

    Updated remediation for CVE-2020-26997, CVE-2021-25678 and CVE-2021-27382

  2. #1

    Publication Date

References