by Kastro
Paper/Archive/CVE-2025-40801

CVE-2025-40801

Siemens COMOS V10.6 — A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Tran…

EPSS 0.3%CVSS 9.2
critical.is priorityof 100
31
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 18.1.181 × 203.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.

Affected

ProductAffectedFixed inSource
COMOS V10.6< V10.6.1V10.6.1CNA
COMOS V10.6< V10.6.1V10.6.1CNA
JT Bi-Directional Translator for STEPall versions–CNA
NX V2412< V2412.8900V2412.8900CNA
NX V2506< V2506.6000V2506.6000CNA
Simcenter 3D< V2506.6000V2506.6000CNA
Simcenter Femap< V2506.0002V2506.0002CNA
Simcenter Studio< V2506.0001V2506.0001CNA
Simcenter System Architect< V2506.0001V2506.0001CNA
Tecnomatix Plant Simulation< V2504.0007V2504.0007CNA

Scores by source

siemens (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
siemens (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert-portal.siemens.com/productcert/html/ssa-710408.htmlrefcert-portal.siemens.com/productcert/html/ssa-212953.html