CVE-2014-100014: Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote...

Security readout for executives and security teams

This issue affects SolidWorks Workgroup PDM 2014 SP2. A network service, pdmwService.exe, can be crashed or potentially taken over when it receives overly long input on its service port. If the service is reachable by untrusted systems, the business risk is legacy engineering-data infrastructure being compromised. Exposure is most likely where SolidWorks Workgroup PDM 2014 SP2 is still deployed and pdmwService.exe is reachable on port 3000, especially from untrusted networks. The provided affected-product data is incomplete beyond that named version. Prioritize remediation if this legacy PDM service is still reachable. The risk is remote compromise of an engineering-data system, but urgency depends on whether the specific 2014 SP2 service exists and how exposed port 3000 is. Mitigation focus: Confirm whether SolidWorks Workgroup PDM 2014 SP2 is still in use.; Check Dassault/SolidWorks guidance for supported upgrades, retirement paths, or fixes.; Restrict TCP port 3000 to trusted hosts or management networks only..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.