← volver
CVE-2021-25175

CVE-2021-25175

EPSS 2.6%
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdfhttps://www.opendesign.com/security-advisorieshttps://www.zerodayinitiative.com/advisories/ZDI-21-218/https://www.zerodayinitiative.com/advisories/ZDI-21-223/https://www.zerodayinitiative.com/advisories/ZDI-21-224/https://www.zerodayinitiative.com/advisories/ZDI-21-244/https://www.zerodayinitiative.com/advisories/ZDI-21-245/https://www.zerodayinitiative.com/advisories/ZDI-21-246/