Description
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied OBJ files. An attacker could leverage this vulnerability to leak information from unexpected memory locations (ZDI-CAN-13770).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | NX 1953 Series | All versions < V1973.3700 | — |
| Siemens | NX 1980 Series | All versions < V1988 | — |
| Siemens | Solid Edge SE2021 | All versions < SE2021MP8 | — |
Advisories 4
- ICSA-21-315-08 Siemens NX OBJ Translator CISA ICS & IT advisories · May 6, 2025
- ICSA-21-287-06 Siemens Solid Edge CISA ICS & IT advisories · May 6, 2025
- SSA-328042 SSA-328042: File Parsing Vulnerabilities in OBJ Translator in NX Siemens ProductCERT · Nov 9, 2021
- SSA-728618 SSA-728618: Multiple Vulnerabilities in Solid Edge before SE2021MP8 Siemens ProductCERT · Sep 28, 2021