Login Request a demo
Low severity · published Sep 28, 2021
CVE-2021-41534
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8)
3.3
CVSS
1%
EPSS
No
On KEV
Description
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13703).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N1
NX 1984 Firmware · Siemens
before 1984 · source: NVD
N1
NX 1988 Firmware · Siemens
before 1984 · source: NVD
SE
Solid Edge · Siemens
before se2021; se2021; se2021; se2021; se2021; se2021; +3 more · source: NVD
Affected product
N1
NX 1984 Firmware
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-41534
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-41534
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1118/
More from NX 1984 Firmware
7.8
CVE-2021-41535
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8)
3.3
CVE-2021-41538
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8)
3.3
CVE-2021-41533
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8)