ZDI-CAN-25720
HIGH 7.8
Overdue
Apr 14, 2025
Labcenter Electronics
Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires no authentication or user interaction beyond launching the application, allowing an attacker with local access to compromise confidentiality, integrity, and availability. The flaw was reported in April 2025 with a vendor deadline of August 2025. Security teams should monitor for patches from Labcenter and restrict local system access to trusted users until updates are available.
Advisory Details
Researcher
Discovered by:
Andrea Micalizzi aka rgod (@rgod777)
Reported
April 14, 2025
Deadline
August 12, 2025
247d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H