Description
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | NX 1980 Series | All versions < V1984 | — |
| Siemens | Solid Edge SE2021 | All versions < SE2021MP8 | — |
Advisories 4
- ICSA-21-287-06 Siemens Solid Edge CISA ICS & IT advisories · May 6, 2025
- ICSA-21-257-09 Siemens NX CISA ICS & IT advisories · May 6, 2025
- SSA-728618 SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 Siemens ProductCERT · Sep 28, 2021
- SSA-208530 SSA-208530: File parsing vulnerabilities in IFC adapter in NX Siemens ProductCERT · Sep 14, 2021