Out-of-Bounds Write Vulnerability in Solid Edge by Siemens

CVE-2021-31343

What is CVE-2021-31343?

The jutil.dll library in all versions of Solid Edge SE2020 prior to 2020MP14 and in all versions of Solid Edge SE2021 prior to SE2021MP5 is vulnerable due to insufficient validation of user-supplied data during the parsing of DFT files. This flaw may allow an attacker to exploit the vulnerability to perform an out-of-bounds write operation, leading to potential arbitrary code execution in the context of the affected process. This risk underscores the importance of updating to secure versions to mitigate potential exploitation.

References