by Kastro
Paper/Archive/CVE-2025-40800

CVE-2025-40800

Siemens COMOS V10.6 — A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions…

EPSS 0.2%CVSS 9.1
critical.is priorityof 100
30
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 10.8.108 × 202.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.

Affected

ProductAffectedFixed inSource
COMOS V10.6< V10.6.1V10.6.1CNA
COMOS V10.6< V10.6.1V10.6.1CNA
NX V2412< V2412.8700V2412.8700CNA
NX V2506< V2506.6000V2506.6000CNA
Simcenter 3D< V2506.6000V2506.6000CNA
Simcenter Femap< V2506.0002V2506.0002CNA
Solid Edge SE2025< V225.0 Update 10V225.0 Update 10CNA
Solid Edge SE2026< V226.0 Update 1V226.0 Update 1CNA

Scores by source

siemens (CNA)9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
siemens (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert-portal.siemens.com/productcert/html/ssa-868571.htmlrefcert-portal.siemens.com/productcert/html/ssa-212953.html