Out-of-Bounds Read Vulnerability in NX 1980 Series and Solid Edge SE2021 by Siemens

CVE-2021-37203

What is CVE-2021-37203?

A vulnerability has been identified in the NX 1980 Series and Solid Edge SE2021 products by Siemens. The issue stems from the plmxmlAdapterIFC.dll, which contains an out-of-bounds read flaw when processing user-supplied IFC files. This can lead to a situation where an attacker may read beyond an allocated buffer, potentially resulting in a denial-of-service condition or exposing sensitive information from system memory. Users of the affected versions are urged to update to the latest releases to mitigate these risks.

References