3.7
Low
CVE-2025-40745 A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions <…
Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens Software Center 3.5 | earliest → < 3.5.8.2 | 3.5.8.2 |
| Simcenter 3D 2506.6000 | earliest → < 2506.6000 | 2506.6000 |
| Simcenter Femap 2506.0002 | earliest → < 2506.0002 | 2506.0002 |
| Simcenter STAR-CCM+ 2602 | earliest → < 2602 | 2602 |
| Solid Edge SE2025 | Versions not published | |
| Solid Edge SE2026 | Versions not published | |
| Tecnomatix Plant Simulation 2504.0008 | earliest → < 2504.0008 | 2504.0008 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of Siemens Software Center
The 4 CVEs of Siemens Software Center →
CVE-2026-110936
Siemens Software Center Uncontrolled Search Path Element Vulnerability
6.7
Medium
CVE-2025-40827
A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions…
7.8
High
CVE-2021-41544
A vulnerability has been identified in Siemens Software Center (All versions < V3.0)
7.8
High