CVE-2021-31343: siemens solid_edge_se2020_firmware Out-of-bounds Write
Vulnerability summary
CVE-2021-31343 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in siemens solid_edge_se2020_firmware. EPSS estimates a 2.50% chance of exploitation in the next 30 days, higher than 84.4% of scored vulnerabilities.
Timeline
- 08-06-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocation structure. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.50%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.50% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens2 products
- solid_edge_se2020_firmware< 2020mp14
- solid_edge_se2021_firmware< se2021mp5
1 vendor · 2 products
References
2 links
us-cert.cisa.gov/ics/advisories/icsa-21-159-09X Refsource MISCThird Party AdvisoryUS Government Resource