CVE-2021-31342:Out-of-bounds write vulnerability in Solid Edge software when parsing DFT files allows code execution.

splash
Back

Description Preview

The ugeom2d.dll library in Siemens Solid Edge SE2020 (before 2020MP14) and SE2021 (before SE2021MP5) contains a critical vulnerability that fails to properly validate user-supplied data when parsing DFT files. This vulnerability results in an out-of-bounds write past the end of an allocated structure, which could allow attackers to execute arbitrary code in the context of the current process. This poses significant risks to organizations using affected versions of Solid Edge for industrial design applications.

Overview

The vulnerability (CVE-2021-31342) affects the ugeom2d.dll component in Siemens Solid Edge, a 3D CAD design software widely used in manufacturing industries. When processing DFT files, the software fails to properly validate user input, leading to memory corruption through an out-of-bounds write operation. An attacker could exploit this vulnerability by creating a specially crafted DFT file that, when opened by a victim using the vulnerable Solid Edge software, would trigger the vulnerability and potentially allow arbitrary code execution with the privileges of the user running the application. This could lead to unauthorized access, data theft, or further system compromise.

Remediation

Users of affected Solid Edge versions should implement the following mitigations:

  1. Update to patched versions:

    • For Solid Edge SE2020: Update to version 2020MP14 or later
    • For Solid Edge SE2021: Update to version SE2021MP5 or later

  2. Until patches can be applied, consider these temporary measures:

    • Exercise caution when opening DFT files from untrusted sources
    • Implement network segmentation to limit exposure of systems running Solid Edge
    • Use the principle of least privilege for users working with Solid Edge
    • Consider using application whitelisting to prevent execution of malicious code

  3. Monitor systems for unusual activity that could indicate exploitation attempts

References

  1. CISA ICS Advisory: https://us-cert.cisa.gov/ics/advisories/icsa-21-159-09
  2. Zero Day Initiative Advisory: https://www.zerodayinitiative.com/advisories/ZDI-21-998/
  3. Siemens Product Security Advisory (contact: productcert@siemens.com)

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Accommodation & Food Services
    Accommodation & Food Services
  2. Administrative, Support, Waste Management & Remediation Services
    Administrative, Support, Waste Management & Remediation Services
  3. Agriculture, Forestry Fishing & Hunting
    Agriculture, Forestry Fishing & Hunting
  4. Arts, Entertainment & Recreation
    Arts, Entertainment & Recreation
  5. Construction
    Construction
  6. Educational Services
    Educational Services
  7. Finance and Insurance
    Finance and Insurance
  8. Health Care & Social Assistance
    Health Care & Social Assistance
  9. Information
    Information
  10. Management of Companies & Enterprises
    Management of Companies & Enterprises
  11. Manufacturing
    Manufacturing
  12. Mining
    Mining
  13. Other Services (except Public Administration)
    Other Services (except Public Administration)
  14. Professional, Scientific, & Technical Services
    Professional, Scientific, & Technical Services
  15. Public Administration
    Public Administration
  16. Real Estate Rental & Leasing
    Real Estate Rental & Leasing
  17. Retail Trade
    Retail Trade
  18. Transportation & Warehousing
    Transportation & Warehousing
  19. Utilities
    Utilities
  20. Wholesale Trade
    Wholesale Trade

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background
Armis Vulnerability Intelligence Database