CVE-2025-40745

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

CVSS 4.0

6.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-25)

CWE

CWE-295

Published

2026-04-14

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• siemens:simcenter_3d
• siemens:simcenter_femap
• siemens:simcenter_star-ccm\+_viewer
• siemens:software_center
• siemens:solid_edge_se2025
• siemens:solid_edge_se2026
• siemens:tecnomatix_plant_simulation

References

• https://cert-portal.siemens.com/productcert/html/ssa-981622.html

Check your stackJSON