Full Report
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR, PSM or DFT format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new versions for the affected products and recommends to update to the latest versions.
Analysis Summary
# Vulnerability: Multiple File Parsing Flaws in Siemens Solid Edge
## CVE Details
- **CVE IDs:**
- CVE-2026-50058, CVE-2026-50062, CVE-2026-50063 (Out-of-bounds Read)
- CVE-2026-50059, CVE-2026-50064 (Out-of-bounds Write)
- CVE-2026-50060, CVE-2026-50061 (Use-After-Free)
- **CVSS Score:**
- CVSS v3.1: **7.8 (High)**
- CVSS v4.0: **7.3 (High)**
- **CWE:** CWE-125, CWE-787, CWE-416
## Affected Systems
- **Products:** Siemens Solid Edge (3D Design, Simulation, and Manufacturing portfolio)
- **Versions:**
- **Solid Edge SE2025:** All versions < V225.0 Update 15
- **Solid Edge SE2026:** All versions < V226.0 Update 7
- **Configurations:** Systems where Solid Edge is used to open and process CAD file formats.
## Vulnerability Description
The affected applications contain multiple memory safety vulnerabilities (Out-of-bounds Read, Out-of-bounds Write, and Use-After-Free) within the file parsing engine. These flaws are triggered when the software processes specially crafted files in **PAR** (Part), **PSM** (Sheet Metal), or **DFT** (Draft) formats. Improper validation of file structures allows for memory corruption during the parsing process.
## Exploitation
- **Status:** Not exploited (No reports of active exploitation in the wild or public PoC provided in the advisory).
- **Complexity:** Low (CVSS v3.1) / High (CVSS v4.0).
- **Attack Vector:** Local (Requires a user to open a malicious file).
## Impact
- **Confidentiality:** High (Potential for arbitrary code execution and data access).
- **Integrity:** High (Potential for unauthorized modification of system files/memory).
- **Availability:** High (Can lead to application crashes or persistent system compromise).
## Remediation
### Patches
Siemens recommends updating to the following versions or later:
- **Solid Edge SE2025:** Update to **V225.0 Update 15**
- **Solid Edge SE2026:** Update to **V226.0 Update 7**
- Downloads are available via the Siemens Support Center: hxxps[://]support[.]sw[.]siemens[.]com/product/246738425/
### Workarounds
- Limit the opening of PAR, PSM, and DFT files to those originating from trusted and known sources.
- Apply general industrial security operational guidelines to restrict environment access.
## Detection
- **Indicators of Compromise:** Unusual application crashes when opening specific CAD files; unexpected outbound network traffic from the `SolidEdge.exe` process.
- **Detection methods and tools:** Use of endpoint detection and response (EDR) tools to monitor for suspicious child processes spawned by Solid Edge or unauthorized memory access.
## References
- **Vendor Advisory:** hxxps[://]cert-portal[.]siemens[.]com/productcert/html/ssa-621657[.]html
- **Siemens ProductCERT:** hxxps[://]www[.]siemens[.]com/cert/advisories
- **Industrial Security Guidelines:** hxxps[://]www[.]siemens[.]com/cert/operational-guidelines-industrial-security