Siemens NX
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads ifc files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary code execution on the target host system. Siemens has released updates for NX and recommends to update to the latest version to fix the vulnerabilities. Siemens recommends to avoid opening of untrusted files from unknown sources.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37203US | high7.1 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read… | ||||
| CVE-2021-37202US | high7.8 | — | ||
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The IFC adapter in affected application contains a use-a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-208530: File parsing vulnerabilities in IFC adapter in NX - CSAF Versionself
- SSA-208530: File parsing vulnerabilities in IFC adapter in NX - PDF Versionself
- SSA-208530: File parsing vulnerabilities in IFC adapter in NX - TXT Versionself
- ICS Advisory ICSA-21-257-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationNX 1980 Series
Avoid opening files from unknown sources in NX
- MitigationNX 1980 Series
Avoid opening files from unknown sources in NX
- BehobenNX 1980 Series
Update to V1984 or later version
- BehobenNX 1980 Series
Update to V1984 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan