Data Validation Vulnerability in NX Before V2512

An attacker with local access to a machine running NX could tamper with internal data during PDF export operations and potentially execute arbitrary code with the privileges of the NX application.

NX users in manufacturing, automotive, and aerospace engineering environments should prioritize this update. Affected systems include engineering workstations running NX for CAD/CAM design and NX Managed Mode deployments.

An attacker must first gain local access to a workstation running NX (e.g., through a compromised account or physical access). The attacker then manipulates internal data structures during a PDF export operation, exploiting the missing validation to inject malicious code that executes when the export process completes.