High SSA-728618 10 CVEs

SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8

Published Sep 28, 2021 · Updated Sep 28, 2021

Vendor: Siemens Product: Solid Edge SE2021

Summary

Siemens has released a new version for Solid Edge that fixes multiple file parsing vulnerabilities which could be triggered when the application reads files in IFC, JT or OBJ formats.

If a user is tricked to opening a malicious file using the affected application this could lead the application to crash, or potentially arbitrary code execution on the target host system.

Siemens recommends to update to the latest version and to limit opening of files from unknown sources in the affected products.

Vulnerabilities 10

Unscored —

CVE-2021-37202

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37203

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41534

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021M…

Siemens Solid Edge SE2021 NX 1980 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41535

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41536

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41537

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41538

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988…

Siemens Solid Edge SE2021 NX 1980 Series NX 1953 Series Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41539

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021
Unscored —

CVE-2021-41540

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains …

Siemens Solid Edge SE2021 Browsers ICS / OT

Sep 28, 2021

Revision history

2021-09-28 #1
Publication Date

References

SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-728618.txt