BaselineWatch
Desk

CVE-2025-40745

6.3 medium SSVC exploitation: none Analyzed

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 6.3 · siemensNVD modified 2026-10-14 17:10

Affected (CPE criteria) 24

  • cpe:2.3:a:siemens:simcenter_3d:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:simcenter_star-ccm\+_viewer:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:software_center:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0001:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0002:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0003:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0004:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0005:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0006:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0007:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0008:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0009:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0010:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0011:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0012:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2026:*:*:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2026:226.0:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_1:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_2:*:*:*:*:*:*
  • cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_3:*:*:*:*:*:*
  • cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*

References 1