Description
A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains an out-of-bounds read while parsing user supplied IFC files which could result in a read past the end of an allocated buffer. This could allow an attacker to cause a denial-of-service condition or read sensitive information from memory locations.
Metrics
CVSS 3.1 7.1/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | NX 1980 Series | All versions < V1984 |
| Siemens | Solid Edge SE2021 | All versions < SE2021MP8 |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdfPatch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdfPatch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdfPatch, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdfPatch, Vendor Advisory
Timeline
- Published
- Sep 14, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified