What’s Vulnerable › Vulnerabilities

CVE-2025-40800

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-07
• Weakness: CWE-295

Description

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.

Affected products

• Siemens COMOS V10.6: before V10.6.1 — fixed in V10.6.1
• Siemens NX V2412: before V2412.8700 — fixed in V2412.8700
• Siemens NX V2506: before V2506.6000 — fixed in V2506.6000
• Siemens Simcenter 3D: before V2506.6000 — fixed in V2506.6000
• Siemens Simcenter Femap: before V2506.0002 — fixed in V2506.0002
• Siemens Solid Edge SE2021: before V225.0 Update 10 — fixed in V225.0 Update 10
• Siemens Solid Edge SE2026: before V226.0 Update 1 — fixed in V226.0 Update 1

How to fix

Upgrade to a fixed version: Siemens COMOS V10.6 V10.6.1; Siemens NX V2412 V2412.8700; Siemens NX V2506 V2506.6000; Siemens Simcenter 3D V2506.6000; Siemens Simcenter Femap V2506.0002; Siemens Solid Edge SE2021 V225.0 Update 10; Siemens Solid Edge SE2026 V226.0 Update 1. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-212953.html
• https://cert-portal.siemens.com/productcert/html/ssa-868571.html

Get alerted when CVE-2025-40800 or the next vulnerability affects your stack