CVE-2025-40745
Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
How to fix
- siemens simcenter_3d2506.6000 or later
- siemens simcenter_femap2506.6000 or later
- siemens simcenter_star-ccm\+_viewer2602 or later
- siemens software_center3.5.8.2 or later
- siemens solid_edge_se2025225.0 or later
- siemens solid_edge_se2026226.0 or later
- siemens tecnomatix_plant_simulation2504.0008 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simcenter_3d | v < 2506.6000 | 2506.6000 |
| siemens simcenter_femap | v < 2506.6000 | 2506.6000 |
| siemens simcenter_star-ccm\+_viewer | v < 2602 | 2602 |
| siemens software_center | v < 3.5.8.2 | 3.5.8.2 |
| siemens solid_edge_se2025 | v < 225.0, 225.0 | 225.0 |
| siemens solid_edge_se2026 | v < 226.0, 226.0 | 226.0 |
| siemens tecnomatix_plant_simulation | v < 2504.0008 | 2504.0008 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.