The vulnerability is a data validation flaw in the PDF export feature of Siemens NX and its Managed Mode. An attacker who obtains local access can manipulate internal data during the export process, which may lead to arbitrary code execution. The weakness is characterized as a stack buffer overflow (CWE‑121).

All versions of Siemens NX and Siemens NX (Managed Mode) earlier than V2512 are vulnerable.

The CVSS score of 7.3 indicates a high impact. The EPSS score of less than 1% shows a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Because the flaw requires local access, the likely attack vector is a local user or process with sufficient privileges. Exploitation would involve providing crafted input to the PDF export path, causing a buffer overflow that could execute arbitrary code on the affected system.