← Back

CVE-2021-37180

nvd nist
Published: Aug 10, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13775)

Affected (1)

Siemens
1 product
Solid Edge Se2021 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solid Edge Se2021 Firmware
Before se2021mp7
Running on/withPlatform Versions
Siemens
Solid Edge Se2021
All versions

Related CWEs

CWE-824
Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.

References (4)

Source: productcert@siemens.com
PatchVendor Advisory
Source: productcert@siemens.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.