ZDI-CAN-25717 HIGH 7.8 Overdue Apr 14, 2025

Labcenter Electronics

Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication, allowing attackers with local access to achieve significant confidentiality, integrity, and availability compromises. The vulnerability was discovered by security researcher Andrea Micalizzi and the vendor has until August 12, 2025 to release a patch. Security teams should monitor for exploitation attempts targeting users of Labcenter's design tools and ensure users avoid opening untrusted files or running the application from untrusted directories.

Advisory Details
Researcher Discovered by: Andrea Micalizzi aka rgod (@rgod777)
Reported April 14, 2025
Deadline August 12, 2025 247d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy