Skip to content
OpenAdvisories
High SSA-715184 4 CVEs

SSA-715184: Multiple File Parsing Vulnerabilities in Solid Edge

Published Mar 9, 2021 · Updated Apr 13, 2021 · Revision 2

Vendor: Siemens Product: Solid Edge SE2020 Product: Solid Edge SE2021

Summary

Siemens has released new versions for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT, XML extensions). If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the target host system.

Siemens recommends to update to the latest version and to avoid opening of untrusted files from unknown sources. Please refer to SSA-574442 for further information regarding latest version update.

Vulnerabilities 4

Revision history

  1. #2

    Included fix information for CVE-2020-28385 and CVE-2021-27380, and reference to new advisory SSA-574442

  2. #1

    Publication Date

References