Windchill unsafe deserialization flaw used for unauthenticated ransomware code execution

Intelligence Summary

A critical unsafe deserialization vulnerability in PTC Windchill has been exploited in a ransomware campaign. Attackers can execute arbitrary code remotely without authentication. The flaw affects systems where the vulnerable Windchill components are exposed to attackers. Once exploited, the attacker can gain a foothold and facilitate ransomware deployment. Organizations running Windchill should prioritize patching and restrict external access until mitigations are applied.

Recommended Action

Prioritize immediate review, validate exposure, and patch or mitigate affected systems.

Topics