Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-26989 Details

Description

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11892)

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf CVEVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf CVEPatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf CVEVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-050/ CVEThird Party AdvisoryVDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdf [email protected]Vendor Advisory

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-121Stack-based Buffer Overflow[email protected]
CWE-787Out-of-bounds Write[email protected]

Affected Products

ProductVersions
siemens jt2go
< 13.1.0.1

CPE

  • cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
siemens solid edge
< se2021
se2021 -
se2021 maintenance_pack1

CPE

  • cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:*

Remediation

  • No remediation found in references.
siemens teamcenter visualization
< 13.1.0.1

CPE

  • cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

11 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-26989
NVD Published Date:
Jan 12, 2021
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-26989 Details - Not Deferred