CVE-2020-28382

January 15, 2021

A vulnerability has been identified in Solid Edge (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.

Summary:

A vulnerability has been identified in Solid Edge (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.

Reference Links(if available):

  • https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf
  • https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04
  • https://www.zerodayinitiative.com/advisories/ZDI-21-052/

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    brute ratel c4

    Brute Ratel C4 Detected – 52[.]68[.]181[.]183:80

    November 17, 2024
    image

    [CHORT] – Ransomware Victim: texanscan[.]org

    November 17, 2024
    image

    [CHORT] – Ransomware Victim: hartwick[.]edu

    November 17, 2024
    image

    [CHORT] – Ransomware Victim: edwardsburgschoolsfoundation[.]org

    November 17, 2024
    image

    [CHORT] – Ransomware Victim: Tri-TechElectronics[.]com

    November 17, 2024