ICSA-21-222-08_Siemens Solid Edge
view advisory published 2021-08-10
Xina1i, working with Trend Micro 's Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37180US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that cou… | ||||
| CVE-2021-37179US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-sup… | ||||
| CVE-2021-37178US | medium5.5 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the aff… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (6)
- MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08 - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08 - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan