DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge

An attacker with local access to a workstation could place a malicious DLL file that gets loaded by Software Center or Solid Edge, allowing the attacker to run arbitrary code with the privileges of the logged-in user. This could lead to unauthorized modifications to CAD designs, theft of intellectual property, or further compromise of the engineering workstation.

Engineering and design organizations using Siemens Software Center for software distribution and asset management, and mechanical engineers using Solid Edge CAD software. This affects manufacturing, automotive, industrial equipment design, and utilities with engineering teams that rely on Siemens design tools on Windows workstations.

An attacker with local access to the system drops a crafted DLL into a directory that Software Center or Solid Edge searches during startup. When the application launches, it automatically loads the malicious DLL instead of the legitimate library, executing the attacker's code with user privileges. This typically requires the attacker to have write access to the application directory or a commonly searched system path.