Description
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2021 | All Versions < SE2021MP7 | — |
Advisories 2
- ICSA-21-222-08 ICSA-21-222-08_Siemens Solid Edge CISA ICS & IT advisories · Aug 10, 2021
- SSA-818688 SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 Siemens ProductCERT · Aug 10, 2021