Siemens Solid Edge

A user who opens a malicious PAR or ASM file in Solid Edge could crash the application or allow an attacker to run arbitrary code on their workstation with the user's privileges.

Engineering and design staff at utilities and water authorities who use Solid Edge for design, documentation, and asset modeling. This primarily affects office workstations rather than control systems, but compromised workstations could become a stepping stone into OT networks if not properly segmented.

An attacker crafts a malicious PAR or ASM file and tricks a user into opening it in Solid Edge. When the application parses the file, a heap buffer overflow occurs, potentially allowing code execution on the user's machine.