CVE-2021-41537: Siemens Solid Edge Viewer OBJ File Parsing Use-After-Free Remote Code Execution Vulnerability

Q: What is CVE-2021-41537?

CVE-2021-41537 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer.

Q: How can this vulnerability be exploited?

To exploit this vulnerability, the target must visit a malicious page or open a malicious file.

Q: What is the severity of CVE-2021-41537?

CVE-2021-41537 has a severity rating of 7.8 (high).

Q: What software is affected by CVE-2021-41537?

Siemens Solid Edge Viewer versions up to and including SE2021 are affected by CVE-2021-41537.

Q: How can I fix CVE-2021-41537?

Update Siemens Solid Edge Viewer to the latest version to fix CVE-2021-41537.

Published Sep 28, 2021

Updated

A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13789).

Affected Software

9 affected components

Siemens Solid Edge<se2021

Siemens Solid Edge=se2021

Siemens Solid Edge=se2021-maintenance_pack1

Siemens Solid Edge=se2021-maintenance_pack2

Siemens Solid Edge=se2021-maintenance_pack3

Siemens Solid Edge=se2021-maintenance_pack4

Siemens Solid Edge=se2021-maintenance_pack5

Siemens Solid Edge=se2021-maintenance_pack6

Siemens Solid Edge=se2021-maintenance_pack7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Solid Edge to a version that resolves this vulnerability.
Fixed in SE2021MP8Patch ZDI-CAN-13789

Event History

Sep 28, 2021

CVE Published

via MITRE·11:12 AM

Data Sourced

via MITRE·11:12 AM

DescriptionWeakness

Data Sourced

via NVD·12:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 29, 2026

Advisory Published

via ZDI·04:44 AM

Data Sourced

via ZDI·04:44 AM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2021-41537?

CVE-2021-41537 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer.

How can this vulnerability be exploited?

To exploit this vulnerability, the target must visit a malicious page or open a malicious file.

What is the severity of CVE-2021-41537?

CVE-2021-41537 has a severity rating of 7.8 (high).

What software is affected by CVE-2021-41537?

Siemens Solid Edge Viewer versions up to and including SE2021 are affected by CVE-2021-41537.

How can I fix CVE-2021-41537?

Update Siemens Solid Edge Viewer to the latest version to fix CVE-2021-41537.

CVE-2021-41537: Siemens Solid Edge Viewer OBJ File Parsing Use-After-Free Remote Code Execution Vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What is CVE-2021-41537?

How can this vulnerability be exploited?

What is the severity of CVE-2021-41537?

What software is affected by CVE-2021-41537?

How can I fix CVE-2021-41537?

Company

Resources

Contact