Out-of-Bounds Write in Solid Edge While Parsing DFT Files

Executive Summary

This is an out-of-bounds write vulnerability in Siemens Solid Edge software versions before SE2025 Update 15 and SE2026 Update 7. It occurs when the application processes specially crafted DFT files, potentially allowing an attacker to execute arbitrary code in the context of the current process.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking the installed version of Solid Edge against the affected versions. Use the application's built-in update checker or verify the version number in the software's about section. Siemens provides a security advisory with detailed instructions for detection.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this vulnerability by tricking a user into opening a malicious DFT file. This could lead to arbitrary code execution, potentially allowing the attacker to take control of the affected system or perform unauthorized actions.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update Solid Edge to versions SE2025 Update 15 or later and SE2026 Update 7 or later. Siemens recommends applying these updates to address the out-of-bounds write vulnerability. Avoid opening untrusted DFT files until the update is applied.

Useful 0 Not Useful 0