CVE-2014-100015
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows...
CVE-2014-100015 is a medium vulnerability (CVSS 6.4) in Solidworks Product Data Management, published January 13, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 57.4%, the 99th percentile. No source names a fixed version.
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
CVE-2014-100015- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
CVE-2014-100015- Updated
- 2026-11-02
EUVDEUVD-2014-1046 No score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
EUVD-2014-1046- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2q9-p4wq-924f No score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows...
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
GHSA-h2q9-p4wq-924f- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write | 2014-02-22 |
| Exploit-DB | SolidWorks Workgroup PDM 2014 - 'pdmwService.exe' Arbitrary File Write (Metasploit) | 2014-03-10 |
| Metasploit | SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write | 2014-02-22 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |