Critical Remote Code Execution Vulnerability in PTC Windchill and FlexPLM

What changed

A significant vulnerability has been discovered in PTC Windchill PDMlink and PTC FlexPLM, which allows for remote code execution due to improper input validation. This issue arises from the deserialization of untrusted data, posing a serious security risk to users.

The vulnerability affects all versions of CPS and Windchill and FlexPLM releases prior to 11.0 M030, necessitating immediate attention from organizations utilizing these products.

Who is affected

Organizations using PTC Windchill and FlexPLM products should be aware of their exposure to this vulnerability. The following groups are particularly at risk:

Companies relying on PTC Windchill for product data management, businesses utilizing FlexPLM for product lifecycle management, and any clients operating versions prior to 11.0 M030.

• PTC Windchill users
• PTC FlexPLM users
• Organizations with CPS versions
• Companies with outdated Windchill and FlexPLM releases

What to do

It is crucial for affected organizations to take immediate steps to mitigate the risks associated with this vulnerability. Users should prioritize updating their systems to the latest versions and implement security best practices.

Regular audits and monitoring for unusual activities can help in identifying potential exploitation attempts.

• Upgrade to Windchill and FlexPLM versions 11.0 M030 or later
• Conduct security assessments of current systems
• Implement monitoring for suspicious activities
• Educate staff on security awareness and protocols