A critical type confusion vulnerability in Labcenter Electronics Proteus version 8.17 SP5 allows remote attackers to achieve arbitrary code execution through malicious file manipulation.

The vulnerability is a type confusion flaw (CWE-843) occurring during the parsing of PDSPRJ files. Attackers can leverage this lack of data validation to execute arbitrary code in the context of the current process, provided the user is tricked into opening a malicious file.

The ability to execute arbitrary code grants an attacker full control over the application process, potentially leading to total system compromise, data theft, or the installation of persistent malware. With a CVSS score of 7.8, this high-severity vulnerability poses a significant risk to organizational integrity, especially if Proteus is used to process sensitive design files in a networked environment.

Immediate Action: Users should restrict the opening of untrusted PDSPRJ files until a vendor-supplied patch is available and verified.

Proactive Monitoring: Security teams should monitor endpoint logs for suspicious process spawning behavior originating from the Proteus application.

Compensating Controls: Deploy endpoint detection and response (EDR) solutions to identify and block anomalous file execution attempts or unauthorized memory access patterns.

Public Exploit Available: No — exploit_available (false).

Given the potential for remote code execution, this vulnerability represents a severe threat to workstations running Proteus. Administrators must prioritize identifying all installations of the affected version and implement strict controls over file intake processes. Users should be educated on the risks of opening unsolicited project files until a formal patch is released and applied.