SSA-328042: File Parsing Vulnerabilities in OBJ Translator in NX
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads OBJ files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for the NX and recommends to update to the latest version. Siemens recommends to avoid opening of untrusted files from unknown sources.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41538US | low3.3 | — | ||
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected… | ||||
| CVE-2021-41535US | high7.8 | — | ||
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationNX 1953 Series
Avoid opening files from unknown sources in NX
- MitigationNX 1953 Series
Avoid opening files from unknown sources in NX
- MitigationNX 1980 Series
Avoid opening files from unknown sources in NX
- MitigationNX 1980 Series
Avoid opening files from unknown sources in NX
- FixedNX 1953 Series
Update to V1973.3700 or later version
https://support.sw.siemens.com/ - FixedNX 1953 Series
Update to V1973.3700 or later version
https://support.sw.siemens.com/ - FixedNX 1980 Series
Update to V1988 or later version
https://support.sw.siemens.com/ - FixedNX 1980 Series
Update to V1988 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan