Multiple PAR and ASM File Parsing Vulnerabilities in Solid Edge

An attacker could craft a malicious Solid Edge design file (PAR or ASM format) that, when opened, executes arbitrary code or crashes the application. This affects design and engineering operations if Solid Edge is used in OT environments.

Engineering and design teams using Solid Edge SE2021 for CAD work, particularly in manufacturing, process design, or infrastructure engineering environments where OT systems interact with design workflows. This includes utilities and municipalities that use design software in their operational planning.

An attacker crafts a malicious PAR or ASM file and tricks a Solid Edge user into opening it (via email, file share, or other social engineering). The parser reads the file, triggers a heap buffer overflow in the file format handler, and executes attacker code in the context of the Solid Edge process.