CVE-2014-100015
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows...
CVE-2014-100015 is a medium vulnerability (CVSS 6.4) in Solidworks Product Data Management, published January 13, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 57.4%, the 99th percentile. No source names a fixed version.
- Severity
- 6.4 MediumCVSS 2.0, NVD
- Exploit chance
- 57.4%EPSS, 99th percentile
- Exploitation
- None known3 public exploits
- Fixed in
- No fix listedNo source names one
Description
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write | 2014-02-22 |
| Metasploit | SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write | 2014-02-22 |
| Exploit-DB | SolidWorks Workgroup PDM 2014 - 'pdmwService.exe' Arbitrary File Write (Metasploit) | 2014-03-10 |
What each source reports
NVD Score used
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
CVE-2014-100015- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
CVE-2014-100015- Updated
- 2026-11-02
EUVDEUVD-2014-1046No score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
EUVD-2014-1046- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2q9-p4wq-924fNo score
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows...
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.
- Record
GHSA-h2q9-p4wq-924f- Weakness
- CWE-22
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.