deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33711
Published: 2021-07-13
Description: A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). The affected application allows verbose error messages which allow leaking of sensitive information, such as full paths.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
CVE: CVE-2021-33713
Published: 2021-07-13
Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leading the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-688
References: https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE: CVE-2021-33714
Published: 2021-07-13
Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE: CVE-2021-33715
Published: 2021-07-13
Description: A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL pointer deference condition and causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-209268.pdf
CVE: CVE-2021-33718
Published: 2021-07-13
Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Applications using Mendix 9 (All versions < V9.3.0). Write access checks of attributes of an object could be bypassed, if user has a write permissions to the first attribute of this object.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-352521.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-352521.pdf
CVE: CVE-2021-34291
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12956)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-870/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34292
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12959)
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-20, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-871/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34293
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13020)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-850/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34294
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13023
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-20, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-851/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34295
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13024)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-852/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34296
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13057)
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-20, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-831/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34297
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13059)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-832/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34298
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13060)
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-20, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-872/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34299
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13192)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-845/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34300
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13194)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-846/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34301
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13196)
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-20, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-873/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34302
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13197)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-847/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34303
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13198)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-848/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34304
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13199)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-874/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34305
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13340)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-833/; https://www.zerodayinitiative.com/advisories/ZDI-21-834/
CVE: CVE-2021-34306
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13342)
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-835/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34307
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13343)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-836/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34308
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13344)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-837/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34309
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13350)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-838/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34310
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13351)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-839/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34311
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Mono_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13352)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-840/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34312
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the fixed-length heap-based buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13353)
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-841/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34313
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the fixed-length heap-based buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13354)
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-842/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34314
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13355)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-843/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34315
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13356)
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-20, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-844/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34316
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The DL180CoolType.dll library in affected applications lacks proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13380)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-849/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34317
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCX files. This could result in an out of bounds write past the fixed-length heap-based buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13402)
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-853/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34318
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13403)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-854/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf
CVE: CVE-2021-34319
Published: 2021-07-13
Description: A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13404)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-20, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-855/; https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf