Siemens NX

An attacker with local access to a system running Siemens NX could craft a malicious file that, when exported to PDF, could execute arbitrary code with the privileges of the NX process.

Organizations using Siemens NX for design, engineering, and CAD work should be aware of this vulnerability. This affects manufacturing, automotive, aerospace, and industrial equipment design teams who rely on NX for product modeling and documentation. The risk is primarily to the engineering workstations themselves, not to production systems or OT equipment directly, unless NX is used to generate control documents or configurations for industrial systems.

An attacker would need to gain local access to a machine running Siemens NX, then provide a crafted CGM (Computer Graphics Metafile) input file. When a user opens this file and exports it to PDF, the missing validation allows the attacker's code to execute during the export process.