Code Execution Vulnerability in JT2Go and Solid Edge by Siemens

CVE-2021-34329

Summary

A vulnerability exists in the plmxmlAdapterSE70.dll library utilized by JT2Go, Solid Edge, and Teamcenter Visualization. This flaw arises from the insufficient validation of user-supplied data during the parsing of PAR files. Consequently, an attacker could exploit this weakness to perform an out of bounds write, allowing execution of arbitrary code within the context of the current process. Proper validation mechanisms are crucial to mitigate such risks and protect users from potential exploitation.

References