SOLIDWORKS eDrawings 2025 < 2025 SP3 Multiple Vulnerabilities

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(242324);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/30");

  script_cve_id(
    "CVE-2025-0831",
    "CVE-2025-6971",
    "CVE-2025-6972",
    "CVE-2025-6973",
    "CVE-2025-6974",
    "CVE-2025-7042",
    "CVE-2025-9447",
    "CVE-2025-9449",
    "CVE-2025-9450"
  );
  script_xref(name:"IAVA", value:"2025-A-0531-S");
  script_xref(name:"IAVA", value:"2025-A-0696-S");

  script_name(english:"SOLIDWORKS eDrawings 2025 < 2025 SP3 Multiple Vulnerabilities");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of SOLIDWORKS eDrawings installed on the remote host is 2025 prior to 2025 SP3. It is, therefore,
affected by multiple vulnerabilities:

  - Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on
  Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while
  opening a specially crafted JT file. (CVE-2025-0831)

  - Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on
  Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while
  opening a specially crafted CATPRODUCT file. (CVE-2025-6971)

  - Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on
  Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while
  opening a specially crafted CATPRODUCT file. (CVE-2025-6972)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.3ds.com/vulnerability/advisories");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version later than SOLIDWORKS eDrawings version 2025 SP3.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-0831");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/07/07");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:3ds:solidworks");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("solidworks_3d_cad_win_installed.nbin");
  script_require_keys("installed_sw/SOLIDWORKS eDrawings");

  exit(0);
}

include('vdf.inc');

# at the time of writing the advisories do not provide affected/fixed versions
# thus, the affected version range comes from the CVEs' CVE.org records and # the fixed version is an educated guess

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [{'scope': 'target', 'match': {'os': 'windows'}}],
  'checks': [
    {
      'product': {'name': 'SOLIDWORKS eDrawings', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
        {'min_version': '2025.0', 'fixed_version': '2025.3', 'fixed_display': '2025 SP3'}
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);