CVE-2021-32946

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.

• CWE-754
• CWE-754

• https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfPatch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-983/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-985/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfPatch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-983/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-985/Third Party Advisory, VDB Entry

Published

Jun 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32940An out-of-bounds read issue exists in the DWG file-recoverin…7.1
• CVE-2021-32941Annke N48PBB (Network Video Recorder) products of version 3.…9.8
• CVE-2021-32942The vulnerability could expose cleartext credentials from AV…5.5
• CVE-2021-32943The affected product is vulnerable to a stack-based buffer o…9.8
• CVE-2021-32944A use-after-free issue exists in the DGN file-reading proced…7.8
• CVE-2021-32945An attacker could decipher the encryption and gain access to…7.5
• CVE-2021-32947FATEK Automation FvDesigner, Versions 1.5.88 and prior is vu…7.8
• CVE-2021-32948An out-of-bounds write issue exists in the DWG file-reading …7.8
• CVE-2021-32949An attacker could utilize a function in MDT AutoSave version…7.5
• CVE-2021-32950An out-of-bounds read issue exists within the parsing of DXF…7.1
• CVE-2021-32951WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an im…5.3
• CVE-2021-32952An out-of-bounds write issue exists in the DGN file-reading …7.8