Siemens Solid Edge
Siemens Solid Edge SE2026 is affected by two file parsing vulnerabilities that could allow an attacker to crash the application or execute arbitrary code when processing specially crafted PAR files. Siemens has released an update (V226.0 Update 5) to address this issue, and CISA recommends users take defensive measures to minimize exploitation risk, including network segmentation and secure remote access methods. This vulnerability impacts critical manufacturing systems.
The Solid Edge SE2026 software, specifically version 226.0.5, contains vulnerabilities related to how it parses PAR files. An attacker could exploit this by crafting malicious PAR files, leading to a stack-based buffer overflow and potentially allowing code execution within the application's context. Siemens has released an update, V226.0 Update 5, to mitigate these risks. CISA is advising organizations to implement defensive measures to reduce the likelihood of exploitation.