CVE-2014-100015

This Metasploit module exploits an arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. It achieves remote code execution by uploading a payload to the startup folder (Windows Vista onwards) or via WMI execution (Windows XP).

This exploit targets SolidWorks Workgroup PDM 2014 SP2, allowing arbitrary file writes via a network socket connection to port 30000. It constructs a malicious payload with an opcode, filename, and data to write, demonstrating the vulnerability.

This Metasploit module exploits an arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior, allowing remote code execution by uploading a payload to the startup folder or via WMI on Windows XP.