Nullsoft Scriptable Install System (NSIS) Vulnerability (CVE-2023-37378) in Parasolid Installer

An attacker with local access to a Windows system where Parasolid is installed could exploit insufficient file permissions on the uninstall directory to escalate privileges and gain administrator-level control, potentially affecting engineering workstations used to configure or design systems that may interact with industrial processes.

This affects engineering teams and design departments that use Parasolid (a CAD/CAM software by Siemens) on Windows workstations for 3D modeling and manufacturing preparation. Parasolid is used in design and engineering workflows but is not typically a direct OT asset; however, compromised engineering workstations can be used to alter designs or infiltrate connected systems like manufacturing execution systems (MES) or product lifecycle management (PLM) systems that may control industrial processes.

An attacker with local user account access to a Windows system where Parasolid is installed can manipulate files in the uninstall directory (which has overly permissive access controls) to inject malicious code or replace legitimate uninstaller components, leading to privilege escalation when the uninstaller or another privileged process accesses the directory.