CVE-2021-41535: A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8)

Description

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13771).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.6% · higher than 75% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

N1

NX 1957 Firmware · Siemens

before 1973.3700 · source: NVD

N1

NX 1961 Firmware · Siemens

before 1973.3700 · source: NVD

N1

NX 1965 Firmware · Siemens

before 1973.3700 · source: NVD

N1

NX 1969 Firmware · Siemens

before 1973.3700 · source: NVD

N1

NX 1984 Firmware · Siemens

before 1984 · source: NVD

N1

NX 1988 Firmware · Siemens

before 1984 · source: NVD

SE

Solid Edge · Siemens

before se2021; se2021; se2021; se2021; se2021; se2021; +3 more · source: NVD