Sign-up

ID

VAR-202101-1900


CVE

CVE-2021-25177


TITLE

Open Design Alliance Drawings SDK  Vulnerability regarding mistyping in

Trust: 0.8

sources: JVNDB: JVNDB-2021-002748

DESCRIPTION

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart). This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the current process. The development kit accesses the data in .dwg and .dgn through a convenient, object-oriented API, and provides functions such as C++ API, support for repairing files, and support for .NET, JAVA, and Python development languages

Trust: 2.34

sources: NVD: CVE-2021-25177 // JVNDB: JVNDB-2021-002748 // ZDI: ZDI-21-219 // VULHUB: VHN-383906

AFFECTED PRODUCTS

vendor:siemensmodel:jt2goscope:ltversion:13.1.0.1

Trust: 1.0

vendor:opendesignmodel:drawings software development kitscope:ltversion:2021.11

Trust: 1.0

vendor:siemensmodel:teamcenter visualizationscope:ltversion:13.1.0.1

Trust: 1.0

vendor:siemensmodel:comosscope:ltversion:10.4.1

Trust: 1.0

vendor:シーメンスmodel:teamcenter visualizationscope: - version: -

Trust: 0.8

vendor:open design alliancemodel:drawings sdkscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:jt2goscope: - version: -

Trust: 0.8

vendor:siemensmodel:jt2goscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-21-219 // JVNDB: JVNDB-2021-002748 // NVD: CVE-2021-25177

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-25177
value: HIGH

Trust: 1.0

NVD: CVE-2021-25177
value: HIGH

Trust: 0.8

ZDI: CVE-2021-25177
value: HIGH

Trust: 0.7

CNNVD: CNNVD-202101-1315
value: HIGH

Trust: 0.6

VULHUB: VHN-383906
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-25177
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-383906
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-25177
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2021-25177
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2021-25177
baseSeverity: HIGH
baseScore: 7.8
vectorString: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-21-219 // VULHUB: VHN-383906 // JVNDB: JVNDB-2021-002748 // CNNVD: CNNVD-202101-1315 // NVD: CVE-2021-25177

PROBLEMTYPE DATA

problemtype:CWE-843

Trust: 1.1

problemtype:Wrong type (CWE-843) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-383906 // JVNDB: JVNDB-2021-002748 // NVD: CVE-2021-25177

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202101-1315

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-202101-1315

PATCH

title:Vulnerabilities in the ODA Drawings Software Development Kit Siemens Siemens Security Advisoryurl:https://www.opendesign.com/security-advisories

Trust: 0.8

title:Siemens has issued an update to correct this vulnerability.url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06

Trust: 0.7

title:Open Design Alliance Drawings SDK Fixes for code issue vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139574

Trust: 0.6

sources: ZDI: ZDI-21-219 // JVNDB: JVNDB-2021-002748 // CNNVD: CNNVD-202101-1315

EXTERNAL IDS

db:NVDid:CVE-2021-25177

Trust: 3.2

db:ZDIid:ZDI-21-219

Trust: 3.2

db:SIEMENSid:SSA-155599

Trust: 1.7

db:SIEMENSid:SSA-663999

Trust: 1.7

db:ICS CERTid:ICSA-21-047-01

Trust: 1.4

db:JVNid:JVNVU92291213

Trust: 0.8

db:JVNDBid:JVNDB-2021-002748

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-11927

Trust: 0.7

db:CNNVDid:CNNVD-202101-1315

Trust: 0.7

db:AUSCERTid:ESB-2022.1047

Trust: 0.6

db:AUSCERTid:ESB-2021.0577

Trust: 0.6

db:CS-HELPid:SB2022031102

Trust: 0.6

db:ICS CERTid:ICSA-22-069-06

Trust: 0.6

db:ICS CERTid:ICSA-21-040-06

Trust: 0.6

db:VULHUBid:VHN-383906

Trust: 0.1

sources: ZDI: ZDI-21-219 // VULHUB: VHN-383906 // JVNDB: JVNDB-2021-002748 // CNNVD: CNNVD-202101-1315 // NVD: CVE-2021-25177

REFERENCES

url:https://www.zerodayinitiative.com/advisories/zdi-21-219/

Trust: 2.5

url:https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf

Trust: 1.7

url:https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf

Trust: 1.7

url:https://www.opendesign.com/security-advisories

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-25177

Trust: 1.4

url:https://us-cert.cisa.gov/ics/advisories/icsa-21-047-01

Trust: 1.4

url:https://us-cert.cisa.gov/ics/advisories/icsa-21-040-06

Trust: 1.3

url:http://jvn.jp/vu/jvnvu92291213/index.html

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2022.1047

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.0577

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2022031102

Trust: 0.6

url:https://us-cert.cisa.gov/ics/advisories/icsa-22-069-06

Trust: 0.6

sources: ZDI: ZDI-21-219 // VULHUB: VHN-383906 // JVNDB: JVNDB-2021-002748 // CNNVD: CNNVD-202101-1315 // NVD: CVE-2021-25177

CREDITS

Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative

Trust: 0.7

sources: ZDI: ZDI-21-219

SOURCES

db:ZDIid:ZDI-21-219
db:VULHUBid:VHN-383906
db:JVNDBid:JVNDB-2021-002748
db:CNNVDid:CNNVD-202101-1315
db:NVDid:CVE-2021-25177

LAST UPDATE DATE

2024-08-14T13:13:07.225000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-21-219date:2021-02-24T00:00:00
db:VULHUBid:VHN-383906date:2022-04-08T00:00:00
db:JVNDBid:JVNDB-2021-002748date:2021-09-29T08:27:00
db:CNNVDid:CNNVD-202101-1315date:2022-03-14T00:00:00
db:NVDid:CVE-2021-25177date:2022-04-08T13:19:27.313

SOURCES RELEASE DATE

db:ZDIid:ZDI-21-219date:2021-02-24T00:00:00
db:VULHUBid:VHN-383906date:2021-01-18T00:00:00
db:JVNDBid:JVNDB-2021-002748date:2021-09-29T00:00:00
db:CNNVDid:CNNVD-202101-1315date:2021-01-18T00:00:00
db:NVDid:CVE-2021-25177date:2021-01-18T08:15:13.273