CVE Alert: CVE-2025-40809 – Siemens – Solid Edge SE2024

**Risk verdict**: High risk of code execution via crafted PRT file parsing, requiring user interaction and local access, with no confirmed active exploitation at this time.

**Why this matters**: A successful exploit could crash the application or run arbitrary code in the process context, risking full host compromise, design data exposure, and interruption of CAD workflows. In engineering environments with trusted file exchange, an attacker could leverage this to pivot within a workstation, exfiltrate sensitive design data, or leverage the compromised process for further footholds.

**Most likely attack path**: An attacker would need a user to open a malicious PRT file on a workstation with the affected software; local access is assumed, but no privileges are required beyond the user’s. The vulnerability enables an out-of-bounds write, potentially enabling code execution or a persistent crash within the current process. Lateral movement would be limited unless the attacker can extend access via additional user interactions or trusted processes.

**Who is most exposed**: Desktop CAD workstations in engineering design teams, particularly where external or supplier files are routinely imported.

**Detection ideas**

• Frequent crashes or hang events in the CAD process during file import.
• Memory corruption indicators or dumps tied to PRT parsing.
• Alerts for opening suspicious or malformed PRT files.
• Unusual process memory growth or code execution artefacts within the CAD host.

-ATION logs showing file-open activity from untrusted sources.

**Mitigation and prioritisation**

• Apply vendor patch: update to the stated fixed build (V224.0 Update 14 or V225.0 Update 6) and verify in staging before broad rollout.
• Enforce application whitelisting and restrict execution of untrusted PRT files; consider signing and trusted-source policies.
• Enable EDR/AV detections for memory corruption and monitor for CAD-process crashes or anomalous code execution.
• Implement strict change-management: schedule patching windows, back up critical design data, and validate CAD workflows post-patch.
• If KEV or EPSS indicators show heightened risk (not present here), elevate to priority 1.