PT-2015-3620 · Dassault Systèmes · Solidworks Workgroup Pdm

Mohamed Shetta · Published 2015-01-13 · Updated 2017-09-08 · CVE-2014-100014

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 SP2

Description The issue is related to multiple stack-based buffer overflows in the pdmwService.exe component. This can be exploited by remote attackers who send a long string in specific opcodes to port 3000, potentially allowing them to execute arbitrary code. The opcodes in question are 2001, 2002, and 2003.

Recommendations For SolidWorks Workgroup PDM version 2014 SP2, consider restricting access to port 3000 to minimize the risk of exploitation. As a temporary workaround, limiting the length of strings accepted by the pdmwService.exe component for opcodes 2001, 2002, and 2003 could help mitigate the issue until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-100014

Affected Products

Solidworks Workgroup Pdm

References · 5

• 🔥 https://exploit-db.com/exploits/31763 · Exploit
• 🔥 http://exploit-db.com/exploits/31763 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-100014 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91264 · Note
• http://secunia.com/advisories/57037 · Note