{"id":"CVE-2025-40745","title":"A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE202…","summary":"A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE202…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-295"],"vendor":"siemens","product":"simcenter_3d","affected":["simcenter_3d < 2506.6000","simcenter_femap < 2506.6000","simcenter_star-ccm+_viewer < 2602","software_center < 3.5.8.2","solid_edge_se2025 < 225.0","solid_edge_se2025 = 225.0","solid_edge_se2026 < 226.0","solid_edge_se2026 = 226.0","tecnomatix_plant_simulation < 2504.0008"],"patched":["simcenter_3d 2506.6000","simcenter_femap 2506.6000","simcenter_star-ccm+_viewer 2602","software_center 3.5.8.2","solid_edge_se2025 225.0","solid_edge_se2026 226.0","tecnomatix_plant_simulation 2504.0008"],"published":"2026-04-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T17:10:00.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-40745","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-981622.html","label":"productcert@siemens.com"}],"tags":["nvd"],"epss":0.00137,"epssPercentile":0.03079,"ingestedAt":"2026-06-29T14:29:18.062Z","slug":"CVE-2025-40745","body":"## Overview\n\nA vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.\n\n## Affected\n\n- `simcenter_3d < 2506.6000`\n- `simcenter_femap < 2506.6000`\n- `simcenter_star-ccm+_viewer < 2602`\n- `software_center < 3.5.8.2`\n- `solid_edge_se2025 < 225.0`\n- `solid_edge_se2025 = 225.0`\n- `solid_edge_se2026 < 226.0`\n- `solid_edge_se2026 = 226.0`\n- `tecnomatix_plant_simulation < 2504.0008`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `simcenter_3d 2506.6000`\n- `simcenter_femap 2506.6000`\n- `simcenter_star-ccm+_viewer 2602`\n- `software_center 3.5.8.2`\n- `solid_edge_se2025 225.0`\n- `solid_edge_se2026 226.0`\n- `tecnomatix_plant_simulation 2504.0008`","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}