CVE-2025-40945 A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1),…
Description
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| COMOS V10.4.5 10.4 | earliest → < 10.4.5.0.2 | 10.4.5.0.2 |
| COMOS V10.6 10.6 | earliest → < 10.6.1 | 10.6.1 |
| Designcenter NX 2512.7000 | earliest → < 2512.7000 | 2512.7000 |
| Simcenter 3D 2512.7000 | earliest → < 2512.7000 | 2512.7000 |
| Simcenter Femap V2506 2506.0003 | earliest → < 2506.0003 | 2506.0003 |
| Simcenter Femap V2512 2512.0002 | earliest → < 2512.0002 | 2512.0002 |
| Simcenter Nastran 2606 | earliest → < 2606 | 2606 |
| Simcenter STAR-CCM+ 2606 | earliest → < 2606 | 2606 |
| Solid Edge SE2025 | Versions not published |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Solid Edge SE2026 | Versions not published | |
| Teamcenter Visualization V2412 2412.0012 | earliest → < 2412.0012 | 2412.0012 |
| Teamcenter Visualization V2506 2506.0009 | earliest → < 2506.0009 | 2506.0009 |
| Teamcenter Visualization V2512 2512.2605 | earliest → < 2512.2605 | 2512.2605 |
| Tecnomatix Plant Simulation V2404 2404.0022 | earliest → < 2404.0022 | 2404.0022 |
| Tecnomatix Plant Simulation V2504 2504.0010 | earliest → < 2504.0010 | 2504.0010 |
| Tecnomatix Process Simulate 2606 | earliest → < 2606 | 2606 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified