CVE-2020-28386

CVE-2020-28386 is an out-of-bounds write vulnerability affecting Siemens Solid Edge SE2020 (prior to MP12) and SE2021 (prior to MP2). This flaw arises from insufficient validation of user-supplied data within DFT files, allowing an attacker to potentially execute arbitrary code. Rated 7.8 HIGH on CVSS, it requires local access and user interaction (e.g., opening a malicious DFT file) for exploitation, leading to high impacts on confidentiality, integrity, and availability. There is currently no public exploit code, Metasploit modules, or evidence of active exploitation, and it has received minimal community discussion or media coverage.