Details of VAR-202109-1793

ID

VAR-202109-1793

CVE

CVE-2021-41534

TITLE

Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trust: 0.7

sources: ZDI: ZDI-21-1118

DESCRIPTION

A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13703). This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of JT files. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements

Trust: 2.16

sources: NVD: CVE-2021-41534 // ZDI: ZDI-21-1118 // CNNVD: CNNVD-202104-975 // VULMON: CVE-2021-41534

AFFECTED PRODUCTS

vendor:	siemens	model:	solid edge	scope:	eq	version:	se2021	Trust: 1.0
vendor:	siemens	model:	solid edge	scope:	lt	version:	se2021	Trust: 1.0
vendor:	siemens	model:	nx 1984	scope:	lt	version:	1984	Trust: 1.0
vendor:	siemens	model:	nx 1988	scope:	lt	version:	1984	Trust: 1.0
vendor:	siemens	model:	solid edge viewer	scope:	-	version:	-	Trust: 0.7

sources: ZDI: ZDI-21-1118 // NVD: CVE-2021-41534

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2021-41534
value:	LOW
Trust: 1.0
ZDI:	CVE-2021-41534
value:	LOW
Trust: 0.7
CNNVD:	CNNVD-202104-975
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-202109-1838
value:	LOW
Trust: 0.6
VULMON:	CVE-2021-41534
value:	MEDIUM
Trust: 0.1

VULMON:	CVE-2021-41534
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1

NVD:	CVE-2021-41534
baseSeverity:	LOW
baseScore:	3.3
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.1
Trust: 1.0
ZDI:	CVE-2021-41534
baseSeverity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-21-1118 // VULMON: CVE-2021-41534 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202109-1838 // NVD: CVE-2021-41534

PROBLEMTYPE DATA

problemtype:

CWE-125

Trust: 1.0

sources: NVD: CVE-2021-41534

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202109-1838

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202104-975

CONFIGURATIONS

sources: NVD: CVE-2021-41534

PATCH

title:	-	url:	https://www.siemens.com/cert/advisories/https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf	Trust: 0.7
title:	Siemens Solid Edge Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=170202	Trust: 0.6
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=3b85ee03e935aff52e55e7402b3926a1	Trust: 0.1

sources: ZDI: ZDI-21-1118 // VULMON: CVE-2021-41534 // CNNVD: CNNVD-202109-1838

EXTERNAL IDS

db:	NVD	id:	CVE-2021-41534	Trust: 2.4
db:	ZDI	id:	ZDI-21-1118	Trust: 2.4
db:	SIEMENS	id:	SSA-728618	Trust: 1.7
db:	SIEMENS	id:	SSA-740908	Trust: 1.6
db:	ZDI_CAN	id:	ZDI-CAN-13703	Trust: 0.7
db:	CS-HELP	id:	SB2021041363	Trust: 0.6
db:	CNNVD	id:	CNNVD-202104-975	Trust: 0.6
db:	CS-HELP	id:	SB2021111006	Trust: 0.6
db:	CS-HELP	id:	SB2021092905	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.3454	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-287-06	Trust: 0.6
db:	ICS CERT	id:	ICSA-21-315-12	Trust: 0.6
db:	CNNVD	id:	CNNVD-202109-1838	Trust: 0.6
db:	VULMON	id:	CVE-2021-41534	Trust: 0.1

sources: ZDI: ZDI-21-1118 // VULMON: CVE-2021-41534 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202109-1838 // NVD: CVE-2021-41534

REFERENCES

url:	https://www.zerodayinitiative.com/advisories/zdi-21-1118/	Trust: 2.4
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf	Trust: 1.6
url:	https://www.siemens.com/cert/advisories/https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf	Trust: 0.7
url:	https://www.cybersecurity-help.cz/vdb/sb2021041363	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-287-06	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2021-41534	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.3454	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021092905	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsa-21-315-12	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021111006	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/125.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-21-1118 // VULMON: CVE-2021-41534 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202109-1838 // NVD: CVE-2021-41534

CREDITS

xina1i

Trust: 1.3

sources: ZDI: ZDI-21-1118 // CNNVD: CNNVD-202109-1838

SOURCES

db:	ZDI	id:	ZDI-21-1118
db:	VULMON	id:	CVE-2021-41534
db:	CNNVD	id:	CNNVD-202104-975
db:	CNNVD	id:	CNNVD-202109-1838
db:	NVD	id:	CVE-2021-41534

LAST UPDATE DATE

2022-05-04T08:13:30.769000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-21-1118	date:	2021-09-30T00:00:00
db:	VULMON	id:	CVE-2021-41534	date:	2021-10-01T00:00:00
db:	CNNVD	id:	CNNVD-202104-975	date:	2021-04-14T00:00:00
db:	CNNVD	id:	CNNVD-202109-1838	date:	2021-11-18T00:00:00
db:	NVD	id:	CVE-2021-41534	date:	2021-11-28T23:29:00

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-21-1118	date:	2021-09-30T00:00:00
db:	VULMON	id:	CVE-2021-41534	date:	2021-09-28T00:00:00
db:	CNNVD	id:	CNNVD-202104-975	date:	2021-04-13T00:00:00
db:	CNNVD	id:	CNNVD-202109-1838	date:	2021-09-28T00:00:00
db:	NVD	id:	CVE-2021-41534	date:	2021-09-28T12:15:00