CVE:CVE-2021-41536
CNNVD:CNNVD-202109-1833
Siemens Solid Edge是德国Siemens公司的一款三维CAD软件。该软件可用于零件设计、装配设计、钣金设计、焊接设计等行业。
Siemens Solid Edge SE2021 SE2021MP8之前版本存在资源管理错误漏洞，该漏洞源于受影响的应用程序在解析OBJ文件时存在释放后重用的漏洞。攻击者可以利用此漏洞在当前进程的上下文中执行代码。
solution:Upgrade siemens solid_edge to a higher version than se2021,se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7,and avoid the version (,se2021),se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7