ICSA-21-222-08_Siemens Solid Edge
Xina1i, working with Trend Micro 's Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37180US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that cou… | ||||
| CVE-2021-37179US | high7.8 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-sup… | ||||
| CVE-2021-37178US | medium5.5 | — | ||
A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the aff… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - MitigationSolid Edge SE2021
Solid Edge SE2021: Update to SE2021MP7 or later version (login required).
https://support.sw.siemens.com/ - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08 - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08 - WorkaroundSolid Edge SE2021
Avoid opening files from unknown sources in Solid Edge.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-222-08
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan