Back to Database
Status published
High
CVE-2021-25175
An issue was discovered in Open Design Alliance Drawings SDK...
Vulnerability Description
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-25175
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.opendesign.com/security-advisories
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
- https://www.zerodayinitiative.com/advisories/ZDI-21-245/
- https://www.zerodayinitiative.com/advisories/ZDI-21-246/
- https://www.zerodayinitiative.com/advisories/ZDI-21-244/
- https://www.zerodayinitiative.com/advisories/ZDI-21-223/
- https://www.zerodayinitiative.com/advisories/ZDI-21-224/
- https://www.zerodayinitiative.com/advisories/ZDI-21-218/
- https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
More from opendesign
View All →CVE-2022-28809
An issue was discovered in Open Design Alliance Drawings SDK...
High
7.8
CVE-2022-28808
An issue was discovered in Open Design Alliance Drawings SDK...
High
7.8
CVE-2022-28807
An issue was discovered in Open Design Alliance Drawings SDK...
High
7.8
CVE-2022-23095
Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading...
Unknown
0
CVE-2021-44860
An out-of-bounds read vulnerability exists when reading a TIF file...
High
7.8
Affected Vendor
opendesign
View all reports →Affected Software
drawings software development kit, comos, jt2go, teamcenter visualization
Vulnerable Versions:
0
Timeline
Official Publish:
January 18th, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.