Skip to content
OpenAdvisories
High SSA-330084 1 CVE

SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family

Published Sep 8, 2026 · Updated Sep 8, 2026

Vendor: Siemens Product: Desigo CC ClickOnce Client V6 Product: Desigo CC ClickOnce Client V7 Product: Desigo CC family V8 Product: Desigo CC family V9 Product: Desigo CC Flex Client V6 Product: Desigo CC Flex Client V7 Product: Desigo CC Installed Client V6 Product: Desigo CC Installed Client V7

Summary

A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lateral movement within the organization.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References