Threat Investigation
Request a demo

CVE-2025-40945

Medium

Description

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

SeverityMedium
CVSS6.7
Exploit probability—
ProductCOMOS V10.4.5
PublishedJul 14, 2026
First seenJul 14, 2026
Weakness typeCWE-426CWE-426

How to fix

Update
  • Siemens COMOS V10.4.5V10.4.5.0.2 or later
  • Siemens COMOS V10.6V10.6.1 or later
  • Siemens Designcenter NXV2512.7000 or later
  • Siemens Simcenter 3DV2512.7000 or later
  • Siemens Simcenter Femap V2506V2506.0003 or later
  • Siemens Simcenter Femap V2512V2512.0002 or later
  • Siemens Simcenter NastranV2606 or later
  • Siemens Simcenter STAR-CCM+V2606 or later
  • Siemens Solid Edge SE2025V225.0 Update 13 or later
  • Siemens Solid Edge SE2026V226.0 Update 04 or later
  • Siemens Teamcenter Visualization V2412V2412.0012 or later
  • Siemens Teamcenter Visualization V2506V2506.0009 or later

Affected products

ProductAffected versionsFixed in
Siemens COMOS V10.4.5v < V10.4.5.0.2V10.4.5.0.2
Siemens COMOS V10.6v < V10.6.1V10.6.1
Siemens Designcenter NXv < V2512.7000V2512.7000
Siemens Simcenter 3Dv < V2512.7000V2512.7000
Siemens Simcenter Femap V2506v < V2506.0003V2506.0003
Siemens Simcenter Femap V2512v < V2512.0002V2512.0002
Siemens Simcenter Nastranv < V2606V2606
Siemens Simcenter STAR-CCM+v < V2606V2606
Siemens Solid Edge SE2025v < V225.0 Update 13V225.0 Update 13
Siemens Solid Edge SE2026v < V226.0 Update 04V226.0 Update 04
Siemens Teamcenter Visualization V2412v < V2412.0012V2412.0012
Siemens Teamcenter Visualization V2506v < V2506.0009V2506.0009
Siemens Teamcenter Visualization V2512v < V2512.2605V2512.2605
Siemens Tecnomatix Plant Simulation V2404v < V2404.0022V2404.0022
Siemens Tecnomatix Plant Simulation V2504v < V2504.0010V2504.0010
Siemens Tecnomatix Process Simulatev < V2606V2606

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.