Out-of-Bounds Write Vulnerability in Solid Edge by Siemens
CVE-2021-31343

8.8HIGH

Key Information:

Vendor

Siemens
Status
Siemens Solid Edge
Vendor
CVE Published:
8 June 2021

What is CVE-2021-31343?

The jutil.dll library in all versions of Solid Edge SE2020 prior to 2020MP14 and in all versions of Solid Edge SE2021 prior to SE2021MP5 is vulnerable due to insufficient validation of user-supplied data during the parsing of DFT files. This flaw may allow an attacker to exploit the vulnerability to perform an out-of-bounds write operation, leading to potential arbitrary code execution in the context of the affected process. This risk underscores the importance of updating to secure versions to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Siemens Solid Edge Solid Edge SE2020 – All versions before 2020MP14

Siemens Solid Edge Solid Edge SE2021 – All versions before SE2021MP5

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-09
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-999/
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.