CVE-2025-40801
Description
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
How to fix
- Siemens COMOS V10.6V10.6.1 or later
- Siemens NX V2412V2412.8900 or later
- Siemens NX V2506V2506.6000 or later
- Siemens Simcenter 3DV2506.6000 or later
- Siemens Simcenter FemapV2506.0002 or later
- Siemens Simcenter StudioV2506.0001 or later
- Siemens Simcenter System ArchitectV2506.0001 or later
- Siemens Tecnomatix Plant SimulationV2504.0007 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens COMOS V10.6 | v < V10.6.1 | V10.6.1 |
| Siemens JT Bi-Directional Translator for STEP | 0 | — |
| Siemens NX V2412 | v < V2412.8900 | V2412.8900 |
| Siemens NX V2506 | v < V2506.6000 | V2506.6000 |
| Siemens Simcenter 3D | v < V2506.6000 | V2506.6000 |
| Siemens Simcenter Femap | v < V2506.0002 | V2506.0002 |
| Siemens Simcenter Studio | v < V2506.0001 | V2506.0001 |
| Siemens Simcenter System Architect | v < V2506.0001 | V2506.0001 |
| Siemens Tecnomatix Plant Simulation | v < V2504.0007 | V2504.0007 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.