CVE-2021-32946
High
Description
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
SeverityHigh
CVSS7.8
Exploit probability—
ProductOpendesign Drawings Sdk
PublishedJun 17, 2021
First seenJun 17, 2021
Weakness typeCWE-754CWE-754
How to fix
Update
- siemens comos10.4.1 or later
- siemens jt2go13.2.0.2 or later
- siemens teamcenter_visualization13.2.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opendesign drawings_sdk | v ≤ 2022.4 | — |
| siemens comos | v < 10.4.1 | 10.4.1 |
| siemens jt2go | v < 13.2.0.2 | 13.2.0.2 |
| siemens teamcenter_visualization | v < 13.2.0.2 | 13.2.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.