CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12529)

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdfVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-611/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdfVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-611/Third Party Advisory, VDB Entry

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25672A vulnerability has been identified in Mendix Forgot Passwor…8.8
• CVE-2021-25673A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25674A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25675A vulnerability has been identified in SIMATIC S7-PLCSIM V5.…5.5
• CVE-2021-25676A vulnerability has been identified in RUGGEDCOM RM1224 (V6.…7.5
• CVE-2021-25677A vulnerability has been identified in APOGEE PXC Compact (B…5.3
• CVE-2021-25679The AdTran Personal Phone Manager software is vulnerable to …5.4
• CVE-2021-25680The AdTran Personal Phone Manager software is vulnerable to …6.1
• CVE-2021-25681AdTran Personal Phone Manager 10.8.1 software is vulnerable …7.5
• CVE-2021-25682It was discovered that the get_pid_info() function in data/a…7.8
• CVE-2021-25683It was discovered that the get_starttime() function in data/…7.8
• CVE-2021-25684It was discovered that apport in data/apport did not properl…7.8