CVE:CVE-2021-41540
CNNVD:CNNVD-202109-1836
Siemens Solid Edge是德国Siemens公司的一款三维CAD软件。该软件可用于零件设计、装配设计、钣金设计、焊接设计等行业。
Siemens Solid Edge SE2021 SE2021MP8之前版本存在资源管理错误漏洞，该漏洞源于受影响的应用程序在解析OBJ文件时存在释放后重用的漏洞。攻击者可利用该漏洞可以利用此漏洞在当前进程的上下文中执行代码。
solution:Upgrade siemens solid_edge to a higher version than se2021,se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7,and avoid the version (,se2021),se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7