CVE-2020-28383

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing PAR files. This can result in an out of bounds write past the memory location that is a read only image address. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11885)

CVSS v3 7.8 HIGH
CVSS v2.0 6.8 MEDIUM

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf	Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf	Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf	Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04	Third Party Advisory US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-047/	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-054/	Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-073/	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:siemens:jt2go::::::::
	cpe:2.3:a:siemens:solid_edge:se2020:-::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack1::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack10::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack11::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack2::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack3::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack4::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack5::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack6::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack7::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack8::::::
	cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack9::::::
	cpe:2.3:a:siemens:solid_edge:se2021:-::::::
	cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1::::::
	cpe:2.3:a:siemens:teamcenter_visualization::::::::

History

12 Oct 2022, 16:45

Type	Values Removed	Values Added
References	~~(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf -~~	(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - Vendor Advisory
CPE	cpe:2.3:a:siemens:solid_edge:::::::: cpe:2.3:a:siemens:solid_edge:se2021:mp1::::::	cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack1:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack7:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack8:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack11:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack9:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack2:::::: cpe:2.3:a:siemens:solid_edge:se2021:-:::::: cpe:2.3:a:siemens:solid_edge:se2020:-:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack3:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack4:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack6:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack5:::::: cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack10::::::

19 May 2021, 16:15

Type	Values Removed	Values Added
References		(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf -
Summary	A vulnerability has been identified in JT2Go (All Versions < V13.1.0), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All Versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing PAR files. This can result in an out of bounds write past the memory location that is a read only image address. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11885)	A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing PAR files. This can result in an out of bounds write past the memory location that is a read only image address. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11885)

09 Feb 2021, 18:15

Type	Values Removed	Values Added
Summary	A vulnerability has been identified in JT2Go (All Versions < V13.1.0), Solid Edge (All Versions < SE2021MP2), Teamcenter Visualization (All Versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing PAR files. This can result in an out of bounds write past the memory location that is a read only image address. An attacker could leverage this vulnerability to execute code in the context of the current process.	A vulnerability has been identified in JT2Go (All Versions < V13.1.0), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All Versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing PAR files. This can result in an out of bounds write past the memory location that is a read only image address. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11885)

02 Feb 2021, 16:59

Type	Values Removed	Values Added
References	~~(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-073/ -~~	(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-073/ - Third Party Advisory, VDB Entry
References	~~(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-047/ -~~	(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-047/ - Third Party Advisory, VDB Entry
References	~~(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-054/ -~~	(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-054/ - Third Party Advisory, VDB Entry

19 Jan 2021, 18:15

Type	Values Removed	Values Added
References		(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-073/ -

14 Jan 2021, 18:15

Type	Values Removed	Values Added
CPE		cpe:2.3:a:siemens:solid_edge:::::::: cpe:2.3:a:siemens:jt2go:::::::: cpe:2.3:a:siemens:solid_edge:se2021:mp1:::::: cpe:2.3:a:siemens:teamcenter_visualization::::::::
References		(MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-047/ - (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-054/ - (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04 - Third Party Advisory, US Government Resource
References	~~(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf -~~	(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf - Vendor Advisory
References	~~(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf -~~	(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf - Vendor Advisory
CWE		CWE-787
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 6.8 v3 : 7.8

12 Jan 2021, 21:41

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-01-12 21:15

Updated : 2023-12-10 13:41

NVD link : CVE-2020-28383

Mitre link : CVE-2020-28383

CVE.ORG link : CVE-2020-28383

JSON object : View

Products Affected

siemens

jt2go
solid_edge
teamcenter_visualization

CWE

CWE-787

Out-of-bounds Write

7.8 /10