Vulnerability Description
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a denial-of-service condition or execute code in the context of the current process.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opendesign | Drawings Sdk | <= 2022.4 |
| Siemens | Comos | < 10.4.1 |
| Siemens | Jt2Go | < 13.2.0.2 |
| Siemens | Teamcenter Visualization | < 13.2.0.2 |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdfThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02Third Party AdvisoryUS Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-983/Third Party AdvisoryVDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-985/Third Party AdvisoryVDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfPatchThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdfThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-02Third Party AdvisoryUS Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-983/Third Party AdvisoryVDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-985/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2021-32946?
CVE-2021-32946 is a vulnerability with a CVSS score of 7.8 (HIGH). An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-...
How severe is CVE-2021-32946?
CVE-2021-32946 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-32946?
Check the references section above for vendor advisories and patch information. Affected products include: Opendesign Drawings Sdk, Siemens Comos, Siemens Jt2Go, Siemens Teamcenter Visualization.