Description
The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Siemens Solid Edge | Solid Edge SE2020 – All versions before 2020MP14, Solid Edge SE2021 – All versions before SE2021MP5 | — |
Advisories 2
- ICSA-21-159-09 Siemens Solid Edge CISA ICS & IT advisories · May 6, 2025
- SSA-208356 SSA-208356: DFT File Parsing Vulnerabilities in Solid Edge Siemens ProductCERT · Jun 8, 2021