ICONICS GENESIS64 and Mitsubishi Electric MC Works64
view advisory published 2021-10-21
Successful exploitation of these vulnerabilities may result in remote code execution.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27041US | high7.8 | — | ||
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code | ||||
| CVE-2021-27040US | low3.3 | — | ||
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationGENESIS64
Do not click web links or open unsolicited attachments in email messages.
- MitigationGENESIS64
Do not click web links or open unsolicited attachments in email messages.
- MitigationMC Works64
Do not click web links or open unsolicited attachments in email messages.
- MitigationMC Works64
Do not click web links or open unsolicited attachments in email messages.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan