CVE:CVE-2020-28384
CNNVD:CNNVD-202101-837
Siemens Solid Edge是德国Siemens公司的一款三维CAD软件。该软件可用于零件设计、装配设计、钣金设计、焊接设计等行业。
Solid Edge SE2021MP2之前存在缓冲区错误漏洞，该漏洞源于程序缺少对用户提供的数据进行正确的验证，攻击者可利用该漏洞执行代码。
solution:Upgrade siemens solid_edge to a higher version than se2020,se2020,se2020:maintenance_pack1,se2020:maintenance_pack10,se2020:maintenance_pack11,se2020:maintenance_pack2,se2020:maintenance_pack3,se2020:maintenance_pack4,se2020:maintenance_pack5,se2020:maintenance_pack6,se2020:maintenance_pack7,se2020:maintenance_pack8,se2020:maintenance_pack9,se2021,se2021:maintenance_pack1,and avoid the version (,se2020),se2020,se2020:maintenance_pack1,se2020:maintenance_pack10,se2020:maintenance_pack11,se2020:maintenance_pack2,se2020:maintenance_pack3,se2020:maintenance_pack4,se2020:maintenance_pack5,se2020:maintenance_pack6,se2020:maintenance_pack7,se2020:maintenance_pack8,se2020:maintenance_pack9,se2021,se2021:maintenance_pack1