ICONICS GENESIS64 and Mitsubishi Electric MC Works64
Advisory ansehen veröffentlicht 2021-10-21
Successful exploitation of these vulnerabilities may result in remote code execution.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27041US | high7.8 | — | ||
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code | ||||
| CVE-2021-27040US | low3.3 | — | ||
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- MitigationGENESIS64
Do not click web links or open unsolicited attachments in email messages.
- MitigationGENESIS64
Do not click web links or open unsolicited attachments in email messages.
- MitigationMC Works64
Do not click web links or open unsolicited attachments in email messages.
- MitigationMC Works64
Do not click web links or open unsolicited attachments in email messages.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan