CVE:CVE-2021-41538
CNNVD:CNNVD-202109-1835
Siemens Solid Edge是德国Siemens公司的一款三维CAD软件。该软件可用于零件设计、装配设计、钣金设计、焊接设计等行业。
Siemens Solid Edge SE2021 SE2021MP8之前版本存在缓冲区错误漏洞，该漏洞源于当解析用户提供的OBJ文件时，受影响的应用程序很容易因意外访问未初始化的指针而泄露信息。攻击者可利用该漏洞可以利用此漏洞从意想不到的内存位置泄漏信息。
solution:Upgrade siemens solid_edge to a higher version than se2021,se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7,and avoid the version (,se2021),se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7; Upgrade siemens nx_1984_firmware to a higher version than 1984,and avoid the version (,1984); Upgrade siemens nx_1988_firmware to a higher version than 1984,and avoid the version (,1984); Upgrade siemens nx_1957_firmware to a higher version than 1973.3700,and avoid the version (,1973.3700); Upgrade siemens nx_1961_firmware to a higher version than 1973.3700,and avoid the version (,1973.3700); Upgrade siemens nx_1965_firmware to a higher version than 1973.3700,and avoid the version (,1973.3700); Upgrade siemens nx_1969_firmware to a higher version than 1973.3700,and avoid the version (,1973.3700)