DWG File Parsing Vulnerability in Solid Edge before SE2022MP9

An attacker could trick a user into opening a malicious DWG file in Solid Edge, allowing them to run arbitrary code on the engineering workstation with the privileges of the user running the application.

Engineering and design teams at manufacturing, utility, and infrastructure facilities who use Solid Edge for CAD work, particularly those designing or modifying control system mechanical components, enclosures, or equipment layouts. Users of older Solid Edge versions on workstations that may interact with external design files are at risk.

An attacker crafts a malicious DWG file and sends it to an engineer or designer. When the user opens the file in an affected version of Solid Edge, the heap overflow is triggered during file parsing, allowing code execution on the workstation. This could compromise the workstation used to design or modify control system configurations.