3.7
Faible
CVE-2025-40745 A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions <…
Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Siemens Software Center 3.5 | premières → < 3.5.8.2 | 3.5.8.2 |
| Simcenter 3D 2506.6000 | premières → < 2506.6000 | 2506.6000 |
| Simcenter Femap 2506.0002 | premières → < 2506.0002 | 2506.0002 |
| Simcenter STAR-CCM+ 2602 | premières → < 2602 | 2602 |
| Solid Edge SE2025 | Versions non publiées | |
| Solid Edge SE2026 | Versions non publiées | |
| Tecnomatix Plant Simulation 2504.0008 | premières → < 2504.0008 | 2504.0008 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Siemens Software Center
Les 4 CVE de Siemens Software Center →
CVE-2026-110936
Siemens Software Center Uncontrolled Search Path Element Vulnerability
6.7
Moyenne
CVE-2025-40827
A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions…
7.8
Élevée
CVE-2021-41544
A vulnerability has been identified in Siemens Software Center (All versions < V3.0)
7.8
Élevée