Multiple Memory Corruption Vulnerabilities in Solid Edge

An attacker can execute arbitrary code on an engineering workstation running Solid Edge by tricking a user into opening a malicious PAR file, potentially allowing access to design files, credentials, or lateral movement within the plant network.

Design and engineering teams using Solid Edge for CAD/mechanical design work are affected. This includes any organization where engineers, drafters, or designers use Solid Edge for manufacturing, plant design, or equipment design—particularly in industries like water utilities, power generation, and chemical processing where design modifications could impact operations.

An attacker crafts a malicious PAR file and sends it to an engineer via email or hosts it on a compromised website. When the engineer opens the file in Solid Edge, the memory corruption vulnerabilities are triggered, allowing the attacker to execute arbitrary code with the engineer's privileges on their workstation.