Siemens Desigo CC Client Code Execution Flaw via Malicious Graphics Files

A Client Code Execution vulnerability in the Siemens Desigo CC family (V6) lets attackers run arbitrary code on client devices through specially crafted graphics documents containing embedded scripts.

The malicious scripts execute when opened in the client application, potentially compromising the client operating system and enabling lateral movement within the organization. Siemens has released fixes for affected products.