CVE-2021-27494

Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing STP files. This could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:datakit:crosscadware:*:*:*:*:*:*:*:*
cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-05-27 16:15

Updated : 2024-02-28 18:28


NVD link : CVE-2021-27494

Mitre link : CVE-2021-27494

CVE.ORG link : CVE-2021-27494


JSON object : View

Products Affected

siemens

  • solid_edge_se2021_firmware
  • solid_edge_se2020
  • solid_edge_se2021
  • solid_edge_se2020_firmware

luxion

  • keyshot

datakit

  • crosscadware
CWE
CWE-121

Stack-based Buffer Overflow