{"id":"CVE-2021-37178","aliases":["EUVD-2021-23752","GHSA-3pr4-6x9m-839x"],"status":"published","title":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML...","description":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00924,"percentile":0.60732,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2021-08-10T10:35:34Z","modified":"2026-06-17T04:00:11Z","products":[{"vendor":"siemens","product":"solid edge se2021"},{"vendor":"siemens","product":"solid_edge_se2021_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37178"},{"url":"https://github.com/advisories/GHSA-3pr4-6x9m-839x"}],"sources":{"cve":[{"id":"CVE-2021-37178","description":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.","status":"published","published":"2021-08-10T10:35:34Z","modified":"2024-08-04T01:16:02.862Z","cwes":["CWE-611"],"updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-23752","description":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.","status":"published","published":"2021-08-10T10:35:34Z","modified":"2024-08-04T01:16:02Z","updated_at":"2026-11-03T03:24:28.314716Z"}],"ghsa":[{"id":"GHSA-3pr4-6x9m-839x","title":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML...","description":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.","status":"published","published":"2022-05-24T19:10:37Z","modified":"2023-01-30T05:01:17Z","cwes":["CWE-611"],"updated_at":"2026-11-02T14:46:22.480874Z"}],"nvd":[{"id":"CVE-2021-37178","description":"A vulnerability has been identified in Solid Edge SE2021 (All Versions \u003c SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.","status":"published","published":"2021-08-10T11:15:09.36Z","modified":"2026-06-17T04:00:11.97Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:06:56.943671Z"}]}}