CVE-2026-34223

Received Received - Intake

Client Code Execution in Desigo CC via Malicious Graphics Documents

Publication date: 2026-09-08

Last updated on: 2026-09-14

Assigner: siemens-SADP

Description

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-14

Generated

2026-09-28

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-34223

EUVD

EUVD-2026-72657

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	desigo_cc_clickonce_client	6
siemens	desigo_cc_clickonce_client	7
siemens	desigo_cc_family	8
siemens	desigo_cc_family	9
siemens	desigo_cc_flex_client	6
siemens	desigo_cc_flex_client	7
siemens	desigo_cc_installed_client	6
siemens	desigo_cc_installed_client	7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to execute malicious code on a user's system through a compromised graphics document in Siemens Desigo CC products. The issue occurs because the application does not properly validate scripts embedded in user-defined graphics files. When a user opens such a file, the embedded script runs and can write arbitrary files to the system.

Impact Analysis

An attacker could exploit this to gain control of your system, install malware, or move laterally within your network. The attacker needs to trick you into opening a malicious graphics document, but once opened, the script executes automatically with your privileges.

Mitigation Strategies

Immediately update all Desigo CC client applications to the latest patched versions. Disable execution of scripts embedded in graphics documents if possible. Restrict user privileges to minimize impact of potential exploitation. Monitor network traffic for suspicious activity related to client-side execution.

Hi! I’m here to help you understand CVE-2026-34223. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70