CVE-2025-40745
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
- Score
- CVSS 4.0 6.3 Medium
- Status
- Analyzed - productcert@siemens.com
- Published
- 2026-04-14
- Last modified
- 2026-10-14
- Weaknesses
- CWE-295
Affected products
- Siemens Software Center (Siemens)
- Simcenter 3d (Siemens)
- Simcenter Femap (Siemens)
- Simcenter Star-ccm (Siemens)
- Simcenter Star-ccm+ Viewer (Siemens)
- Software Center (Siemens)
- Solid Edge Se2025 (Siemens)
- Solid Edge Se2026 (Siemens)
- Tecnomatix Plant Simulation (Siemens)
References
- https://cert-portal.siemens.com/productcert/html/ssa-981622.html
