CVE-2022-39806

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Author version 9

Description The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Drawing (.slddrw) file in SAP 3D Visual Enterprise Author, it can trigger a Remote Code Execution. This occurs when the payload forces a stack-based overflow or reuses a dangling pointer that refers to overwritten space in memory.

Recommendations For SAP 3D Visual Enterprise Author version 9, consider avoiding the use of CoreCadTranslator.exe until a patch is available, as it is involved in the processing of potentially malicious .slddrw files. As a temporary workaround, restrict the opening of .slddrw files from untrusted sources to minimize the risk of exploitation.