CVE-2020-28382

A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.

• CWE-787
• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdfVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-052/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-075/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdfVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-052/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-075/Third Party Advisory, VDB Entry

Published

Jan 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2837Vulnerability in the Oracle Marketing product of Oracle E-Bu…8.2
• CVE-2020-28371An issue was discovered in ReadyTalk Avian 1.2.0 before 2020…9.8
• CVE-2020-28373upnpd on certain NETGEAR devices allows remote (LAN) attacke…8.8
• CVE-2020-28374In drivers/target/target_core_xcopy.c in the Linux kernel be…8.1
• CVE-2020-2838Vulnerability in the Oracle CRM Gateway for Mobile Devices p…8.6
• CVE-2020-28381A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2020-28383A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2020-28384A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2020-28385A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2020-28386A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2020-28387A vulnerability has been identified in Solid Edge SE2020 (Al…5.5
• CVE-2020-28388A vulnerability has been identified in APOGEE PXC Compact (B…5.3