EUVD-2026-56114
GHSA-hhr8-76wm-5vv4
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
File must be opened locally (AV:L), converting the OOB read to reliable code execution is non-trivial (AC:H), and user must actively open the PAR file (UI:R) with no privilege prerequisite.
Primary rating from Vendor (siemens).
CVSS VectorVendor: siemens
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
AnalysisAI
Out-of-bounds read in Siemens Solid Edge's PAR file parser enables code execution within the running process when a victim opens a specially crafted part file. Both active product branches are affected: SE2025 prior to V225.0 Update 15 and SE2026 prior to V226.0 Update 7. No public exploit code or CISA KEV listing exists at time of analysis, but the vendor-confirmed code-execution primitive elevates this beyond a typical information-disclosure finding tagged under CWE-125.
Technical ContextAI
Solid Edge is Siemens' parametric CAD suite used primarily in industrial design and manufacturing environments. PAR files are the native Solid Edge part-file format; parsing them involves reading complex binary geometry and metadata structures into memory. CWE-125 (Out-of-Bounds Read) describes a condition where the application reads memory past the end of an allocated buffer - here triggered by malformed structures embedded in a crafted PAR file. Although out-of-bounds reads are classically associated with information disclosure, the vendor advisory confirms this instance can be leveraged to achieve code execution within the process context, indicating the read primitive can be chained to corrupt adjacent memory or influence control flow. CPE strings cpe:2.3:a:siemens:solid_edge_se2025 and cpe:2.3:a:siemens:solid_edge_se2026 confirm both product lines are affected across all prior builds.
RemediationAI
The primary remediation is to upgrade Solid Edge SE2025 to V225.0 Update 15 or later, and Solid Edge SE2026 to V226.0 Update 7 or later, per Siemens ProductCERT advisory SSA-621657 at https://cert-portal.siemens.com/productcert/html/ssa-621657.html. Where immediate patching is not feasible, organizations should enforce strict controls on PAR file ingestion: restrict users from opening PAR files received from external or untrusted sources, and apply file-origin policies via endpoint controls or DLP tooling. Disabling automatic thumbnail or preview rendering of PAR files in the Windows shell can reduce passive exposure, though the primary trigger requires full application parsing. Applying network segmentation to engineering workstations reduces the attacker's delivery options but does not eliminate insider-threat or supply-chain delivery paths. Each workaround introduces workflow friction for teams that routinely share part files across organizational boundaries.
More in Solid Edge Se2025
View allOut-of-bounds write in Siemens Solid Edge SE2025 and SE2026 enables code execution within the application's process when
Out-of-bounds read code execution in Siemens Solid Edge SE2025 and SE2026 allows an attacker to execute arbitrary code i
Use-after-free in Siemens Solid Edge SE2025 and SE2026 enables arbitrary code execution in the context of the current pr
Use-after-free memory corruption in Siemens Solid Edge SE2025 and SE2026 allows code execution in the context of the cur
Out-of-bounds write in Siemens Solid Edge SE2025 and SE2026 allows code execution within the application process when a
Out-of-bounds read in Siemens Solid Edge SE2025 and SE2026 enables code execution within the application process when a
Local privilege escalation in Siemens' IAM Client SDK, a shared authentication component bundled across a wide range of
Improper TLS certificate validation in Siemens Software Center, Simcenter 3D, Simcenter Femap, Simcenter STAR-CCM+, Soli
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versi
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today