CVE-2021-27381: siemens solid_edge Out-of-bounds Read

Vulnerability summary

CVE-2021-27381 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in siemens solid_edge. EPSS estimates a 0.94% chance of exploitation in the next 30 days, higher than 60% of scored vulnerabilities.

Timeline

1. 15-03-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534)

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.