CVE-2021-27380

A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12532)

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdfPatch, Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdfPatch, Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06Third Party Advisory, US Government Resource

Published

Mar 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27374VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP…7.5
• CVE-2021-27375Traefik before 2.4.5 allows the loading of IFRAME elements f…5.3
• CVE-2021-27376An issue was discovered in the nb-connect crate before 1.0.3…9.8
• CVE-2021-27377An issue was discovered in the yottadb crate before 1.2.0 fo…9.8
• CVE-2021-27378An issue was discovered in the rand_core crate before 0.6.2 …9.8
• CVE-2021-27379An issue was discovered in Xen through 4.11.x, allowing x86 …7.8
• CVE-2021-27381A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-27382A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-27383A vulnerability has been identified in SIMATIC HMI Comfort O…7.5
• CVE-2021-27384A vulnerability has been identified in SIMATIC HMI Comfort O…9.8
• CVE-2021-27385A vulnerability has been identified in SIMATIC HMI Comfort O…7.5
• CVE-2021-27386A vulnerability has been identified in SIMATIC HMI Comfort O…7.5