CVE-2020-26997

CVE-2020-26997 affects Siemens Solid Edge (SE2020/SE2021) where PAR file parsing lacks input validation, allowing pointer dereference and potential code execution. Affected products: Solid Edge SE2020 (< SE2020MP13/MP14) and SE2021 (

Siemens Solid Edge File Parsing (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Solid Edge Vulnerabilities: Out-of-bounds Write, Improper Restriction of XML External Entity Reference, Out-of-bounds Read 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...