← Database

CVE-2025-40745

LOW CVSS: 3.7 Published: 2026-04-14 Modified: 2026-06-29

Description

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

Affected Platforms

Siemens Simcenter 3DSiemens Solid Edge Se2025Siemens Simcenter Star-Ccm\+ ViewerSiemens Simcenter FemapSiemens Solid Edge Se2026Siemens Software CenterSiemens Tecnomatix Plant Simulation

Weakness Type

CWE-295

References