Siemens Solid Edge SE2021 Firmware vulnerabilities

15 CVEs affecting Siemens Solid Edge SE2021 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37180, published 2021-08-10.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-22651, published 2021-02-23. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR…
• CVE-2021-22647, published 2021-02-23. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to…
• CVE-2021-31343, published 2021-06-08. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT files.…
• CVE-2021-31342, published 2021-06-08. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proper validation of user-supplied data when parsing DFT…
• CVE-2021-22649, published 2021-02-23. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple…
• CVE-2021-27494, published 2021-05-27. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing…
• CVE-2021-22643, published 2021-02-23. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to…
• CVE-2021-27490, published 2021-05-27. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read, which may allow an…
• CVE-2021-27496, published 2021-05-27. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing…
• CVE-2021-27488, published 2021-05-27. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing…

Latest

• CVE-2021-37180, published 2021-08-10. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of…
• CVE-2021-37179, published 2021-08-10. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files…
• CVE-2021-37178, published 2021-08-10. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application…
• CVE-2021-27492, published 2021-05-27. Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days. When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions…