What is CVE-2021-25670?

CVE-2021-25670 is a high-severity vulnerability in Siemens Tecnomatix Robotexpert, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-04-22.

How severe is CVE-2021-25670?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Siemens Tecnomatix Robotexpert

CVE-2021-25670

A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected applications lack proper validation of user-supplied data when parsing CELL files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12608)

Vulnerability class: Buffer Overflow

EPSS: 0.009 (55.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Siemens Tecnomatix Robotexpert — versions All versions < V16.1
Siemens Tecnomatix_robotexpert

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

productcert@siemens.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-25670?: CVE-2021-25670 is a high-severity vulnerability in Siemens Tecnomatix Robotexpert, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-04-22.
How severe is CVE-2021-25670?: High severity. CVSS v3 base score is 7.8 out of 10.