Vulnerabilities > CVE-2021-37179 - Use After Free vulnerability in Siemens Solid Edge Se2021 Firmware

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13777)

Vulnerable Configurations

Part Description Count
OS
Siemens
1
Hardware
Siemens
1

Common Weakness Enumeration (CWE)