Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-40745

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Sim

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Siemens Software Center

Default version status: unknown

  • 0 to < V3.5.8.2affected

Siemens Simcenter 3D

Default version status: unknown

  • 0 to < V2506.6000affected

Siemens Simcenter Femap

Default version status: unknown

  • 0 to < V2506.0002affected

Siemens Simcenter STAR-CCM+

Default version status: unknown

  • 0 to < V2602affected

Siemens Solid Edge SE2025

Default version status: unknown

  • 0 to < V225.0 Update 13affected

Siemens Solid Edge SE2026

Default version status: unknown

  • 0 to < V226.0 Update 04affected

Siemens Tecnomatix Plant Simulation

Default version status: unknown

  • 0 to < V2504.0008affected

References