Sign-up

ID

VAR-202101-1896


CVE

CVE-2021-25173


TITLE

Open Design Alliance Drawings SDK  Vulnerability in resource allocation without restrictions or throttling in

Trust: 0.8

sources: JVNDB: JVNDB-2021-002840

DESCRIPTION

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart). This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. The development kit accesses the data in .dwg and .dgn through a convenient, object-oriented API, and provides functions such as C++ API, support for repairing files, and support for .NET, JAVA, and Python development languages

Trust: 2.34

sources: NVD: CVE-2021-25173 // JVNDB: JVNDB-2021-002840 // ZDI: ZDI-21-225 // VULHUB: VHN-383902

AFFECTED PRODUCTS

vendor:siemensmodel:jt2goscope:ltversion:13.1.0.1

Trust: 1.0

vendor:opendesignmodel:drawings software development kitscope:ltversion:2021.12

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:13.1.0.1

Trust: 1.0

vendor:siemensmodel:comosscope:ltversion:10.4.1

Trust: 1.0

vendor:シーメンスmodel:jt2goscope: - version: -

Trust: 0.8

vendor:open design alliancemodel:drawings sdkscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:teamcenter visualizationscope: - version: -

Trust: 0.8

vendor:siemensmodel:jt2goscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-21-225 // JVNDB: JVNDB-2021-002840 // NVD: CVE-2021-25173

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-25173
value: HIGH

Trust: 1.0

NVD: CVE-2021-25173
value: HIGH

Trust: 0.8

ZDI: CVE-2021-25173
value: HIGH

Trust: 0.7

CNNVD: CNNVD-202101-1319
value: HIGH

Trust: 0.6

VULHUB: VHN-383902
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-25173
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-383902
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-25173
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2021-25173
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2021-25173
baseSeverity: HIGH
baseScore: 7.8
vectorString: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-21-225 // VULHUB: VHN-383902 // JVNDB: JVNDB-2021-002840 // CNNVD: CNNVD-202101-1319 // NVD: CVE-2021-25173

PROBLEMTYPE DATA

problemtype:CWE-770

Trust: 1.1

problemtype:Allocation of resources without limits or throttling (CWE-770) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-383902 // JVNDB: JVNDB-2021-002840 // NVD: CVE-2021-25173

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202101-1319

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202101-1319

PATCH

title:Vulnerabilities in the ODA Drawings Software Development Kit Siemens Siemens Security Advisoryurl:https://www.opendesign.com/security-advisories

Trust: 0.8

title:Siemens has issued an update to correct this vulnerability.url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06

Trust: 0.7

title:Open Design Alliance Drawings SDK Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139577

Trust: 0.6

sources: ZDI: ZDI-21-225 // JVNDB: JVNDB-2021-002840 // CNNVD: CNNVD-202101-1319

EXTERNAL IDS

db:NVDid:CVE-2021-25173

Trust: 3.2

db:ZDIid:ZDI-21-225

Trust: 2.4

db:SIEMENSid:SSA-155599

Trust: 1.7

db:SIEMENSid:SSA-663999

Trust: 1.7

db:JVNid:JVNVU92291213

Trust: 0.8

db:JVNid:JVNVU91083521

Trust: 0.8

db:JVNDBid:JVNDB-2021-002840

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-12019

Trust: 0.7

db:CNNVDid:CNNVD-202101-1319

Trust: 0.7

db:AUSCERTid:ESB-2022.1047

Trust: 0.6

db:AUSCERTid:ESB-2021.0577

Trust: 0.6

db:CS-HELPid:SB2022031102

Trust: 0.6

db:ICS CERTid:ICSA-21-047-01

Trust: 0.6

db:ICS CERTid:ICSA-22-069-06

Trust: 0.6

db:ICS CERTid:ICSA-21-040-06

Trust: 0.6

db:VULHUBid:VHN-383902

Trust: 0.1

sources: ZDI: ZDI-21-225 // VULHUB: VHN-383902 // JVNDB: JVNDB-2021-002840 // CNNVD: CNNVD-202101-1319 // NVD: CVE-2021-25173

REFERENCES

url:https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf

Trust: 1.7

url:https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf

Trust: 1.7

url:https://www.opendesign.com/security-advisories

Trust: 1.7

url:https://www.zerodayinitiative.com/advisories/zdi-21-225/

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-25173

Trust: 1.4

url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06

Trust: 1.3

url:https://jvn.jp/vu/jvnvu92291213/index.html

Trust: 0.8

url:https://jvn.jp/vu/jvnvu91083521/

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2022.1047

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.0577

Trust: 0.6

url:https://us-cert.cisa.gov/ics/advisories/icsa-21-047-01

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2022031102

Trust: 0.6

url:https://us-cert.cisa.gov/ics/advisories/icsa-22-069-06

Trust: 0.6

sources: ZDI: ZDI-21-225 // VULHUB: VHN-383902 // JVNDB: JVNDB-2021-002840 // CNNVD: CNNVD-202101-1319 // NVD: CVE-2021-25173

CREDITS

rgod

Trust: 0.7

sources: ZDI: ZDI-21-225

SOURCES

db:ZDIid:ZDI-21-225
db:VULHUBid:VHN-383902
db:JVNDBid:JVNDB-2021-002840
db:CNNVDid:CNNVD-202101-1319
db:NVDid:CVE-2021-25173

LAST UPDATE DATE

2024-08-14T12:15:35.711000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-21-225date:2021-02-24T00:00:00
db:VULHUBid:VHN-383902date:2022-04-08T00:00:00
db:JVNDBid:JVNDB-2021-002840date:2021-10-06T05:19:00
db:CNNVDid:CNNVD-202101-1319date:2022-03-14T00:00:00
db:NVDid:CVE-2021-25173date:2022-04-08T13:22:57.690

SOURCES RELEASE DATE

db:ZDIid:ZDI-21-225date:2021-02-24T00:00:00
db:VULHUBid:VHN-383902date:2021-01-18T00:00:00
db:JVNDBid:JVNDB-2021-002840date:2021-10-06T00:00:00
db:CNNVDid:CNNVD-202101-1319date:2021-01-18T00:00:00
db:NVDid:CVE-2021-25173date:2021-01-18T08:15:13.023