PRT File Parsing Vulnerability in NX Before V2406.3000

An attacker could craft a malicious PRT (print/design) file that, when opened by an engineer in NX, could crash the application or execute arbitrary code on the engineering workstation with the user's privileges.

Manufacturing engineers and design teams using NX CAD software for design and modeling. This primarily affects engineering workstations used for product design and documentation rather than direct industrial control systems, but compromised workstations could be a lateral attack vector into production environments.

An attacker would create a malicious PRT file and trick an engineer into opening it within NX (via email, USB drive, or shared network folder). NX then parses the file, triggering an out-of-bounds read in memory that could allow code execution on the engineering workstation. This affects design workflows but not direct control of industrial equipment.