Skip to content
Not rated

CVE-2020-28387 A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions…

Description

A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). When opening a specially crafted SEECTCXML file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external dtd. (ZDI-CAN-11923)

Affected products and versions

Product Affected versions Fixed in
Solid Edge SE2020 Versions not published
Solid Edge SE2021 Versions not published

References

Timeline

  1. Published
  2. Last modified
The 13 CVEs of Solid Edge SE2020 →
Track this CVE