CVE-2021-41538

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied OBJ files. An attacker could leverage this vulnerability to leak information from unexpected memory locations (ZDI-CAN-13770).

Link	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf	Patch Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1122/	Third Party Advisory VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack2:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack3:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack4:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack5:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack6:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack7:*:*:*:*:*:*

---

Published : 2021-09-28 12:15

Updated : 2021-11-28 11:29

---

NVD link : CVE-2021-41538

Mitre link : CVE-2021-41538

No products.

CWE-824

Access of Uninitialized Pointer