CVE-2021-37178: Siemens Solid Edge SE2021 Firmware

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.

Affected products

• Siemens Solid Edge SE2021 Firmware: before se2021mp7 (fixed in se2021mp7)

Published 2021-08-10. Last modified 2026-06-17.