A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-981622.html | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Jun 2026, 14:03
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_1:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0011:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0002:*:*:*:*:*:* cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0009:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2026:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:simcenter_star-ccm\+_viewer:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0003:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2026:226.0:-:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_2:*:*:*:*:*:* cpe:2.3:a:siemens:software_center:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0008:*:*:*:*:*:* cpe:2.3:a:siemens:simcenter_femap:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0006:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0012:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0004:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2026:226.0:update_3:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0010:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0005:*:*:*:*:*:* cpe:2.3:a:siemens:simcenter_3d:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0001:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:update_0007:*:*:*:*:*:* cpe:2.3:a:siemens:solid_edge_se2025:225.0:-:*:*:*:*:*:* |
|
| First Time |
Siemens
Siemens tecnomatix Plant Simulation Siemens solid Edge Se2026 Siemens solid Edge Se2025 Siemens simcenter Star-ccm\+ Viewer Siemens simcenter Femap Siemens simcenter 3d Siemens software Center |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-981622.html - Mitigation, Vendor Advisory |
14 Apr 2026, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-14 09:16
Updated : 2026-06-29 14:03
NVD link : CVE-2025-40745
Mitre link : CVE-2025-40745
CVE.ORG link : CVE-2025-40745
JSON object : View
Products Affected
siemens
- solid_edge_se2025
- simcenter_femap
- simcenter_3d
- software_center
- solid_edge_se2026
- tecnomatix_plant_simulation
- simcenter_star-ccm\+_viewer
CWE
CWE-295
Improper Certificate Validation