CVE-2021-37180
Last modified
CVE-2021-37180 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. EPSS estimates a 1.38% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13775)
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Solid Edge Se2021 Firmware | < se2021mp7 |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdfPatch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1113/Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdfPatch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1113/Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-37180?
How severe is CVE-2021-37180?
How do I fix CVE-2021-37180?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-37175A vulnerability has been identified in RUGGEDCOM ROX MX5000 …5.3
- CVE-2021-37176A vulnerability has been identified in Simcenter Femap V2020…3.3
- CVE-2021-37177A vulnerability has been identified in SINEMA Remote Connect…6.5
- CVE-2021-37178A vulnerability has been identified in Solid Edge SE2021 (Al…5.5
- CVE-2021-37179A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
- CVE-2021-3718A denial of service vulnerability was reported in some Think…4.6
- CVE-2021-37181A vulnerability has been identified in Cerberus DMS V4.0 (Al…10
- CVE-2021-37182A vulnerability has been identified in SCALANCE XM408-4C (Al…7.5
- CVE-2021-37183A vulnerability has been identified in SINEMA Remote Connect…6.5
- CVE-2021-37184A vulnerability has been identified in Industrial Edge Manag…9.8
- CVE-2021-37185A vulnerability has been identified in SIMATIC Drive Control…7.5
- CVE-2021-37186A vulnerability has been identified in LOGO! CMR2020 (All ve…5.4
Are you affected by CVE-2021-37180?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST