SSA-975766 V1.0: Open Design Alliance Drawings SDK Vulnerability in Solid Edge

Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Note:

• This advisory covers security vulnerabilities recently disclosed by Open Design Alliance [0]

[0] https://www.opendesign.com/security-advisories

alliance application arbitrary code arbitrary code execution code code execution crash design dwg edge file malicious parsing products sdk siemens solid solid edge ssa vulnerability