Siemens Solid Edge

An attacker could crash Solid Edge or execute arbitrary code on an engineering workstation if a user opens a malicious PAR or CFG file, potentially compromising the design environment and allowing access to sensitive CAD models or project data.

Engineering and design teams using Solid Edge SE2025 for CAD modeling are affected. This is particularly relevant to organizations in manufacturing, industrial design, and process engineering that rely on Solid Edge workstations for creating and modifying design files.

An attacker would need to craft a malicious PAR or CFG file and trick a Solid Edge user into opening it. Since the vulnerability requires user interaction (file opening) and is not remotely exploitable, the attack vector typically involves social engineering via email or file sharing to deliver the malicious file to an engineering workstation.