Solidworks : Security Vulnerabilities, CVEs,
CVE-2014-100015
Public exploit
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
Max CVSS
6.4
EPSS Score
55.30%
Published
2015-01-13
Updated
2017-09-08
Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a (1) 2001, (2) 2002, or (3) 2003 opcode to port 3000.
Max CVSS
7.5
EPSS Score
29.39%
Published
2015-01-13
Updated
2017-09-08
The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.
Max CVSS
9.3
EPSS Score
12.84%
Published
2007-04-06
Updated
2017-07-29
3 vulnerabilities found