Description
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13777)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2021 | All Versions < SE2021MP7 | — |
Advisories 2
- ICSA-21-222-08 ICSA-21-222-08_Siemens Solid Edge CISA ICS & IT advisories · Aug 10, 2021
- SSA-818688 SSA-818688: Multiple Vulnerabilities in Solid Edge before SE2021MP7 Siemens ProductCERT · Aug 10, 2021