A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process.
| Software | From | Fixed in |
|---|---|---|
| siemens / solid_edge | - | se2025.x |
| siemens / solid_edge | se2025 | se2025.x |
| siemens / solid_edge | se2025-update_1 | se2025-update_1.x |
| siemens / solid_edge | se2025-update_2 | se2025-update_2.x |
| siemens / solid_edge | se2025-update_3 | se2025-update_3.x |
| siemens / solid_edge | se2025-update_4 | se2025-update_4.x |