ZDI-CAN-25720 HIGH 7.8 Overdue Apr 14, 2025

Labcenter Electronics

Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires no authentication or user interaction beyond launching the application, allowing an attacker with local access to compromise confidentiality, integrity, and availability. The flaw was reported in April 2025 with a vendor deadline of August 2025. Security teams should monitor for patches from Labcenter and restrict local system access to trusted users until updates are available.

Advisory Details
Researcher Discovered by: Andrea Micalizzi aka rgod (@rgod777)
Reported April 14, 2025
Deadline August 12, 2025 247d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy