CVE:CVE-2021-27380
CNNVD:CNNVD-202103-697
Siemens Solid Edge是德国Siemens公司的一款三维CAD软件。该软件可用于零件设计、装配设计、钣金设计、焊接设计等行业。
Siemens Solid Edge 存在缓冲区错误漏洞，该漏洞源于受影响的应用程序在解析PAR文件时缺乏对用户提供的数据的适当验证。攻击者可以利用此漏洞在当前进程的上下文中执行代码。
solution:Upgrade siemens solid_edge to a higher version than se2020,se2020,se2020:maintenance_pack1,se2020:maintenance_pack10,se2020:maintenance_pack11,se2020:maintenance_pack12,se2020:maintenance_pack2,se2020:maintenance_pack3,se2020:maintenance_pack4,se2020:maintenance_pack5,se2020:maintenance_pack6,se2020:maintenance_pack7,se2020:maintenance_pack8,se2020:maintenance_pack9,se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,and avoid the version (,se2020),se2020,se2020:maintenance_pack1,se2020:maintenance_pack10,se2020:maintenance_pack11,se2020:maintenance_pack12,se2020:maintenance_pack2,se2020:maintenance_pack3,se2020:maintenance_pack4,se2020:maintenance_pack5,se2020:maintenance_pack6,se2020:maintenance_pack7,se2020:maintenance_pack8,se2020:maintenance_pack9,se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3