VULNERABILITY INTELLIGENCE

CVE-2021-37180

CVSS score7.8 HIGH

EPSS probability1.38%

CISA KEVNot currently listed

Published2021-08-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13775)

Weakness classification

productcert@siemens.com: CWE-824
nvd@nist.gov: CWE-824

Primary references

productcert@siemens.com — Patch, Vendor Advisory
productcert@siemens.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry