Out-of-bounds write in Siemens Solid Edge
Priority MEDIUM 43CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.
Why it matters now
EPSS 0.02505 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Siemens Solid Edge | Solid Edge SE2020 – All versions before 2020MP14; Solid Edge SE2021 – All versions before SE2021MP5 | — | No fix listed | CNA |
- Siemens Solid Edge Vendor— Affected Solid Edge SE2020 – All versions before 2020MP14; Solid Edge SE2021 – All versions before SE2021MP5 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:* | before 2020mp14 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:* | before se2021mp5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:* Versions before 2020mp14 Vulnerable ·Siemens
- cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:* Versions before se2021mp5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-31342
- 2026-10-03 Alias added: GHSA-xphh-j59m-3cvp
References
More Siemens Solid Edge Se2020 Firmware vulnerabilities
- TI-2021-11487 Out-of-bounds write in Siemens Solid Edge CVSS 3.1HIGH 8.8
- TI-2021-05544 Path traversal in Luxion KeyShot versions CVSS 3.1HIGH 7.8
- TI-2021-05540 Out-of-bounds write in Luxion KeyShot CVSS 3.1HIGH 7.8
- TI-2021-08981 Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr… CVSS 3.1HIGH 7.8
- TI-2021-08979 Stack-based buffer overflow in Datakit Software libraries embedded in Luxion KeyShot… CVSS 3.1HIGH 7.8
- TI-2021-08975 Out-of-bounds read in Datakit Software libraries embedded in Luxion KeyShot software CVSS 3.1HIGH 7.8
Sources
- CVE-2021-31342 · CVE Program
- CVE-2021-31342 · NVD
- FIRST EPSS
- GHSA-xphh-j59m-3cvp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences