ZDI-CAN-25718 HIGH 7.8 Overdue Apr 14, 2025

Labcenter Electronics

Labcenter Electronics, a well-known developer of circuit simulation and PCB design software, has a high-severity vulnerability (CVSS 7.8) that can be exploited locally without authentication or special privileges, requiring only user interaction to trigger complete compromise of confidentiality, integrity, and availability. The attack vector indicates this is a local privilege escalation or file-based exploit rather than a remote attack. Security teams should monitor for any suspicious activity involving Labcenter products and prepare patches for deployment before the August 12, 2025 vendor deadline.

Advisory Details
Researcher Discovered by: Andrea Micalizzi aka rgod (@rgod777)
Reported April 14, 2025
Deadline August 12, 2025 247d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy