CVE-2021-41533: Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
First published: Tue Sep 28 2021(Updated: )
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13565).
Credit: productcert@siemens.com productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Solid Edge | <se2021 | |
| Siemens Solid Edge | =se2021 | |
| Siemens Solid Edge | =se2021-maintenance_pack1 | |
| Siemens Solid Edge | =se2021-maintenance_pack2 | |
| Siemens Solid Edge | =se2021-maintenance_pack3 | |
| Siemens Solid Edge | =se2021-maintenance_pack4 | |
| Siemens Solid Edge | =se2021-maintenance_pack5 | |
| Siemens Solid Edge | =se2021-maintenance_pack6 | |
| Siemens Solid Edge | =se2021-maintenance_pack7 | |
| Siemens Nx 1984 Firmware | <1984 | |
| Siemens Nx 1984 | ||
| Siemens Nx 1988 Firmware | <1984 | |
| Siemens Nx 1988 | ||
| Siemens Solid Edge Viewer | ||
| All of | ||
| Siemens Nx 1984 Firmware | <1984 | |
| Siemens Nx 1984 | ||
| All of | ||
| Siemens Nx 1988 Firmware | <1984 | |
| Siemens Nx 1988 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Siemens Solid Edge Viewer vulnerability?
The vulnerability ID for this Siemens Solid Edge Viewer vulnerability is CVE-2021-41533.
What is the severity of CVE-2021-41533?
The severity of CVE-2021-41533 is medium with a severity value of 3.3.
How can remote attackers exploit the vulnerability CVE-2021-41533?
Remote attackers can exploit the vulnerability CVE-2021-41533 by tricking the target into visiting a malicious page or opening a malicious file.
Which software is affected by the Siemens Solid Edge Viewer vulnerability CVE-2021-41533?
The Siemens Solid Edge Viewer software versions se2021 up to se2021-maintenance_pack7 are affected by the vulnerability CVE-2021-41533.
How can I fix the vulnerability CVE-2021-41533 in Siemens Solid Edge Viewer?
To fix the vulnerability CVE-2021-41533 in Siemens Solid Edge Viewer, it is recommended to update to the latest version of the software available from Siemens.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/severity
- agent/references
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-1117
- alias/ZDI-CAN-13565
- alias/CVE-2021-41533
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/tags
- agent/event
- agent/softwarecombine
- agent/trending
- vendor/siemens
- canonical/siemens solid edge
- version/siemens solid edge/se2021
- version/siemens solid edge/se2021-maintenance_pack1
- version/siemens solid edge/se2021-maintenance_pack2
- version/siemens solid edge/se2021-maintenance_pack3
- version/siemens solid edge/se2021-maintenance_pack4
- version/siemens solid edge/se2021-maintenance_pack5
- version/siemens solid edge/se2021-maintenance_pack6
- version/siemens solid edge/se2021-maintenance_pack7
- canonical/siemens nx 1984 firmware
- canonical/siemens nx 1984
- canonical/siemens nx 1988 firmware
- canonical/siemens nx 1988
- canonical/siemens solid edge viewer