Description
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | NX 1980 Series | All versions < V1984 | — |
| Siemens | Solid Edge SE2021 | All versions < SE2021MP8 | — |
Advisories 4
- ICSA-21-287-06 Siemens Solid Edge CISA ICS & IT advisories · May 6, 2025
- ICSA-21-257-09 Siemens NX CISA ICS & IT advisories · May 6, 2025
- SSA-728618 SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 Siemens ProductCERT · Sep 28, 2021
- SSA-208530 SSA-208530: File parsing vulnerabilities in IFC adapter in NX Siemens ProductCERT · Sep 14, 2021