Vulnerability · Published Sep 28, 2021 · Assigned by siemens

CVE-2021-41538

Low 3.3

In plain English

A low-severity security flaw in NX 1953 Series from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS NVD)3.3Low

Exploit odds (30 days)1.0%top 38.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied OBJ files. An attacker could leverage this vulnerability to leak information from unexpected memory locations (ZDI-CAN-13770).

Affected products (as reported)

Vendor	Product	Versions
Siemens	NX 1953 Series	All versions < V1973.3700
Siemens	NX 1980 Series	All versions < V1988
Siemens	Solid Edge SE2021	All versions < SE2021MP8

Weakness: CWE-824

References

https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-1122/ x_refsource_MISC