CVE-2025-40745mediumCWE-295

CVE-2025-40745: falha de média gravidade em Siemens Software Center

Publicada em

Seguir esta CVE+ Monitorar Tecnomatix Plant Simulation+ Monitorar Simcenter Femap

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.1%
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Siemens · Siemens Software CenterSiemens · Simcenter 3DSiemens · Simcenter FemapSiemens · Simcenter STAR-CCM+Siemens · Solid Edge SE2025Siemens · Solid Edge SE2026Siemens · Tecnomatix Plant Simulation
CVEs relacionadas — Siemens Software Center

No mesmo produto, das mais perigosas para as menos.

CVE-2026-110936HIGHCVE-2026-110936EPSS 1.0%KEVCVE-2021-46699—CVE-2021-46699EPSS 1.5%CVE-2021-46162—CVE-2021-46162EPSS 1.3%CVE-2022-28661—CVE-2022-28661EPSS 1.2%CVE-2022-28663—CVE-2022-28663EPSS 1.1%CVE-2022-34748—CVE-2022-34748EPSS 1.0%