What is CVE-2021-27380?

CVE-2021-27380 is a high-severity vulnerability in Siemens Solid_edge, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-03-15.

How severe is CVE-2021-27380?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Siemens Solid_edge

CVE-2021-27380

A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could resul…

Vulnerability class: Buffer Overflow

EPSS: 0.014 (69.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Siemens Solid_edge — versions se2020, se2021
Siemens Solid Edge Se2020 — versions All versions < SE2020MP13
Siemens Solid Edge Se2021 — versions All Versions < SE2021MP4

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
productcert@siemens.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
productcert@siemens.com (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)

Frequently asked questions

What is CVE-2021-27380?: CVE-2021-27380 is a high-severity vulnerability in Siemens Solid_edge, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2021-03-15.
How severe is CVE-2021-27380?: High severity. CVSS v3 base score is 7.8 out of 10.