Siemens Solid Edge

An attacker could execute arbitrary code on an engineering workstation if a user is tricked into opening a malicious PAR (part) file in Solid Edge, potentially compromising design data, credentials, or project files stored on that system.

This affects engineering teams and design departments at any manufacturing or product development organization that uses Siemens Solid Edge CAD software. It is particularly relevant to utilities, manufacturers, and infrastructure operators who use Solid Edge for equipment design and documentation. The vulnerability targets workstations, not directly the operational control systems themselves, but compromised engineering workstations could be a stepping stone to access critical design data or deploy malware to connected networks.

An attacker crafts a malicious PAR file and tricks a user (via email, file sharing, or social engineering) into opening it in Solid Edge. The application parses the file, triggers a memory corruption vulnerability (buffer overflow or out-of-bounds read), and the attacker's code runs with the privileges of the Solid Edge process and logged-in user.