CVE-2021-32946: opendesign drawings_sdk
Vulnerability summary
CVE-2021-32946 is a high (CVSS 7.8) vulnerability in opendesign drawings_sdk. EPSS estimates a 2.80% chance of exploitation in the next 30 days, higher than 86.2% of scored vulnerabilities.
Timeline
- 17-06-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.80%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.80% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens3 products
- comos< 10.4.1
- jt2go< 13.2.0.2
- teamcenter_visualization< 13.2.0.2
Opendesign1 product
- drawings_sdk≤ 2022.4
2 vendors · 4 products
References
5 links
us-cert.cisa.gov/ics/advisories/icsa-21-159-02X Refsource MISCThird Party AdvisoryUS Government Resource