CVE-2025-40741

7.3 highEPSS 0.2%

High (7.3) in siemens solid edge. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:solid_edge

References

https://cert-portal.siemens.com/productcert/html/ssa-091753.html

Check your stack JSON