CVE-2021-37203: siemens nx_1980 Out-of-bounds Read
Vulnerability summary
CVE-2021-37203 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in siemens nx_1980. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.4% of scored vulnerabilities.
Timeline
- 14-09-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.64% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens4 products
- nx_1980< 1984
- nx 1980 seriesAll versions < V1984
- solid_edge< se2021 | se2021 | se2021:maintenance_pack1 | se2021:maintenance_pack2 | se2021:maintenance_pack3 | se2021:maintenance_pack4 | se2021:maintenance_pack5 | se2021:maintenance_pack6 | se2021:maintenance_pack7
- solid_edge_se2021_firmwareAll versions < SE2021MP8
1 vendor · 4 products