EUVD-2026-56111
GHSA-jw62-q46m-fp5c
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local file-open trigger (AV:L), reliable heap exploitation non-trivial (AC:H), no auth needed (PR:N), user must open file (UI:R), process-scoped impact only (S:U).
Primary rating from Vendor (siemens).
CVSS VectorVendor: siemens
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
AnalysisAI
Out-of-bounds write in Siemens Solid Edge SE2025 and SE2026 allows code execution within the application process when a user opens a specially crafted DFT file. The vulnerability resides in the DFT file parser and can deliver full confidentiality, integrity, and availability impact on the vulnerable system if a victim is induced to open a malicious file. No public exploit identified at time of analysis, and the product is not listed in CISA KEV; however, Siemens has released patched versions and published advisory SSA-621657.
Technical ContextAI
Siemens Solid Edge is a professional CAD/CAM application widely used in manufacturing and engineering environments. DFT files are Solid Edge Draft documents used for 2D engineering drawings. The vulnerability is classified as CWE-787 (Out-of-Bounds Write), a memory corruption class where a parser writes data beyond the bounds of an allocated buffer while processing attacker-controlled DFT file structures. This type of flaw typically arises from insufficient length validation of file-embedded field values before writing to a heap or stack buffer, and is a well-understood exploitation primitive in desktop application attack surface. Affected CPEs are cpe:2.3:a:siemens:solid_edge_se2025 (all versions before V225.0 Update 15) and cpe:2.3:a:siemens:solid_edge_se2026 (all versions before V226.0 Update 7).
RemediationAI
Vendor-released patches are available: upgrade Solid Edge SE2025 to V225.0 Update 15 or later, and Solid Edge SE2026 to V226.0 Update 7 or later, as documented in Siemens advisory SSA-621657 (https://cert-portal.siemens.com/productcert/html/ssa-621657.html). As a compensating control where immediate patching is not feasible, organizations should block receipt of unsolicited DFT files via email gateways and restrict file sharing channels to trusted internal sources only; note this reduces but does not eliminate exposure since DFT files are a normal business artifact in engineering workflows. Additionally, running Solid Edge in a sandboxed or low-privilege user context can limit the blast radius of successful exploitation to the current user's process, reducing lateral movement risk.
More in Solid Edge Se2025
View allOut-of-bounds write in Siemens Solid Edge SE2025 and SE2026 enables code execution within the application's process when
Out-of-bounds read code execution in Siemens Solid Edge SE2025 and SE2026 allows an attacker to execute arbitrary code i
Out-of-bounds read in Siemens Solid Edge's PAR file parser enables code execution within the running process when a vict
Use-after-free in Siemens Solid Edge SE2025 and SE2026 enables arbitrary code execution in the context of the current pr
Use-after-free memory corruption in Siemens Solid Edge SE2025 and SE2026 allows code execution in the context of the cur
Out-of-bounds read in Siemens Solid Edge SE2025 and SE2026 enables code execution within the application process when a
Local privilege escalation in Siemens' IAM Client SDK, a shared authentication component bundled across a wide range of
Improper TLS certificate validation in Siemens Software Center, Simcenter 3D, Simcenter Femap, Simcenter STAR-CCM+, Soli
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versi
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today