Siemens NX Data Validation Vulnerability Leading to Arbitrary Code Execution

A data validation vulnerability has been identified in Siemens NX, affecting all versions prior to V2512. This vulnerability could allow an attacker with local access to interfere with internal data during the PDF export process, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected system.

Remediation

Users are advised to update to Siemens NX version V2512 or later. Additional product-specific recommendations can be found in the Siemens Security Advisory SSA-535115.