VDB
GHSA-97x2-phf9-hw3v
GHSA-97x2-phf9-hw3v
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Record from GitHub Advisory Database · Published May 24, 2022
A vulnerability has been identified in Solid Edge (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write into uninitialized memory. An attacker could leverage this vulnerability to execute code in the context of the current process.
Risk scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Timeline
- May 24, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-97x2-phf9-hw3v
vulnetix vdb fixes GHSA-97x2-phf9-hw3v
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-97x2-phf9-hw3v/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf url
- https://www.zerodayinitiative.com/advisories/ZDI-21-053 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-28381 advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-012-04 url
- https://www.zerodayinitiative.com/advisories/ZDI-21-048 url
- https://www.zerodayinitiative.com/advisories/ZDI-21-074 url