Description
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens COMOS V10.6
Default version status: unknown
0 to < V10.6.1affected
Siemens COMOS V10.6
Default version status: unknown
0 to < V10.6.1affected
Siemens NX V2412
Default version status: unknown
0 to < V2412.8700affected
Siemens NX V2506
Default version status: unknown
0 to < V2506.6000affected
Siemens Simcenter 3D
Default version status: unknown
0 to < V2506.6000affected
Siemens Simcenter Femap
Default version status: unknown
0 to < V2506.0002affected
Siemens Solid Edge SE2025
Default version status: unknown
0 to < V225.0 Update 10affected
Siemens Solid Edge SE2026
Default version status: unknown
0 to < V226.0 Update 1affected