A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://cert-portal.siemens.com/productcert/html/ssa-981622.html Mitigation, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.3 · siemensNVD modified 2026-10-14 17:10
Affected (CPE criteria) 24
cpe:2.3:a:siemens:simcenter_3d:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:simcenter_star-ccm\+_viewer:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:software_center:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:-:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0001:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0002:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0003:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0004:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0005:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0006:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0007:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0008:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0009:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0010:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0011:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0012:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2026:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2026:226.0:-:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_1:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_2:*:*:*:*:*:*cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_3:*:*:*:*:*:*cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*
References 1
- https://cert-portal.siemens.com/productcert/html/ssa-981622.html Mitigation, Vendor Advisory