Vulnerability-Lookup

CVE-2025-40945 (GCVE-0-2025-40945)

Vulnerability from cvelistv5 – Published: 2026-07-14 09:19 – Updated: 2026-07-14 12:16

Summary

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-14 12:16 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

siemens CNA under the icscert root

CNA scorecard C 65/100 over 82 records in the last 180 days details

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

16 products

Vendor	Product	Version	CPE status
Siemens	COMOS V10.4.5	Affected: 0 , < V10.4.5.0.2 (custom)	guessed
Siemens	COMOS V10.6	Affected: 0 , < V10.6.1 (custom)	guessed
Siemens	Designcenter NX	Affected: 0 , < V2512.7000 (custom)	guessed
Siemens	Simcenter 3D	Affected: 0 , < V2512.7000 (custom)	guessed
Siemens	Simcenter Femap V2506	Affected: 0 , < V2506.0003 (custom)	guessed
Siemens	Simcenter Femap V2512	Affected: 0 , < V2512.0002 (custom)	guessed
Siemens	Simcenter Nastran	Affected: 0 , < V2606 (custom)	guessed
Siemens	Simcenter STAR-CCM+	Affected: 0 , < V2606 (custom)	guessed
Siemens	Solid Edge SE2025	Affected: 0 , < V225.0 Update 13 (custom)	guessed
Siemens	Solid Edge SE2026	Affected: 0 , < V226.0 Update 04 (custom)	guessed
Siemens	Teamcenter Visualization V2412	Affected: 0 , < V2412.0012 (custom)	guessed
Siemens	Teamcenter Visualization V2506	Affected: 0 , < V2506.0009 (custom)	guessed
Siemens	Teamcenter Visualization V2512	Affected: 0 , < V2512.2605 (custom)	guessed
Siemens	Tecnomatix Plant Simulation V2404	Affected: 0 , < V2404.0022 (custom)	guessed
Siemens	Tecnomatix Plant Simulation V2504	Affected: 0 , < V2504.0010 (custom)	guessed
Siemens	Tecnomatix Process Simulate	Affected: 0 , < V2606 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40945",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T12:16:50.783446Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T12:16:59.871Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "COMOS V10.4.5",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.4.5.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "COMOS V10.6",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.6.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Designcenter NX",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.7000",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter 3D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.7000",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Femap V2506",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2506.0003",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Femap V2512",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.0002",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Nastran",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter STAR-CCM+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Solid Edge SE2025",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V225.0 Update 13",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Solid Edge SE2026",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V226.0 Update 04",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2412",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2412.0012",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2506",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2506.0009",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2512",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.2605",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Plant Simulation V2404",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2404.0022",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Plant Simulation V2504",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2504.0010",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Process Simulate",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in COMOS V10.4.5 (All versions \u003c V10.4.5.0.2), COMOS V10.6 (All versions \u003c V10.6.1), Designcenter NX (All versions \u003c V2512.7000), Simcenter 3D (All versions \u003c V2512.7000), Simcenter Femap V2506 (All versions \u003c V2506.0003), Simcenter Femap V2512 (All versions \u003c V2512.0002), Simcenter Nastran (All versions \u003c V2606), Simcenter STAR-CCM+ (All versions \u003c V2606), Solid Edge SE2025 (All versions \u003c V225.0 Update 13), Solid Edge SE2026 (All versions \u003c V226.0 Update 04), Teamcenter Visualization V2412 (All versions \u003c V2412.0012), Teamcenter Visualization V2506 (All versions \u003c V2506.0009), Teamcenter Visualization V2512 (All versions \u003c V2512.2605), Tecnomatix Plant Simulation V2404 (All versions \u003c V2404.0022), Tecnomatix Plant Simulation V2504 (All versions \u003c V2504.0010), Tecnomatix Process Simulate (All versions \u003c V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T09:19:08.857Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2025-40945",
    "datePublished": "2026-07-14T09:19:08.857Z",
    "dateReserved": "2025-04-16T09:06:15.879Z",
    "dateUpdated": "2026-07-14T12:16:59.871Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-40945",
      "date": "2026-11-08",
      "epss": "0.00164",
      "percentile": "0.05673"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unknown",
                "product": "COMOS V10.4.5",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V10.4.5.0.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "COMOS V10.6",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V10.6.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Designcenter NX",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2512.7000",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Simcenter 3D",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2512.7000",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Simcenter Femap V2506",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2506.0003",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Simcenter Femap V2512",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2512.0002",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Simcenter Nastran",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2606",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Simcenter STAR-CCM+",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2606",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Solid Edge SE2025",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V225.0 Update 13",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Solid Edge SE2026",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V226.0 Update 04",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Teamcenter Visualization V2412",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2412.0012",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Teamcenter Visualization V2506",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2506.0009",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Teamcenter Visualization V2512",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2512.2605",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Tecnomatix Plant Simulation V2404",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2404.0022",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Tecnomatix Plant Simulation V2504",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2504.0010",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Tecnomatix Process Simulate",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V2606",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "productcert@siemens.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability has been identified in COMOS V10.4.5 (All versions \u003c V10.4.5.0.2), COMOS V10.6 (All versions \u003c V10.6.1), Designcenter NX (All versions \u003c V2512.7000), Simcenter 3D (All versions \u003c V2512.7000), Simcenter Femap V2506 (All versions \u003c V2506.0003), Simcenter Femap V2512 (All versions \u003c V2512.0002), Simcenter Nastran (All versions \u003c V2606), Simcenter STAR-CCM+ (All versions \u003c V2606), Solid Edge SE2025 (All versions \u003c V225.0 Update 13), Solid Edge SE2026 (All versions \u003c V226.0 Update 04), Teamcenter Visualization V2412 (All versions \u003c V2412.0012), Teamcenter Visualization V2506 (All versions \u003c V2506.0009), Teamcenter Visualization V2512 (All versions \u003c V2512.2605), Tecnomatix Plant Simulation V2404 (All versions \u003c V2404.0022), Tecnomatix Plant Simulation V2504 (All versions \u003c V2504.0010), Tecnomatix Process Simulate (All versions \u003c V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access."
          },
          {
            "lang": "es",
            "value": "Se ha identificado una vulnerabilidad en COMOS V10.4.5 (Todas las versiones menor que la versi\u00f3n V10.4.5.0.2), COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), Designcenter NX (Todas las versiones menor que la versi\u00f3n V2512.7000), Simcenter 3D (Todas las versiones menor que la versi\u00f3n V2512.7000), Simcenter Femap V2506 (Todas las versiones menor que la versi\u00f3n V2506.0003), Simcenter Femap V2512 (Todas las versiones menor que la versi\u00f3n V2512.0002), Simcenter Nastran (Todas las versiones menor que la versi\u00f3n V2606), Simcenter STAR-CCM+ (Todas las versiones menor que la versi\u00f3n V2606), Solid Edge SE2025 (Todas las versiones menor que la versi\u00f3n V225.0 Update 13), Solid Edge SE2026 (Todas las versiones menor que la versi\u00f3n V226.0 Update 04), Teamcenter Visualization V2412 (Todas las versiones menor que la versi\u00f3n V2412.0012), Teamcenter Visualization V2506 (Todas las versiones menor que la versi\u00f3n V2506.0009), Teamcenter Visualization V2512 (Todas las versiones menor que la versi\u00f3n V2512.2605), Tecnomatix Plant Simulation V2404 (Todas las versiones menor que la versi\u00f3n V2404.0022), Tecnomatix Plant Simulation V2504 (Todas las versiones menor que la versi\u00f3n V2504.0010), Tecnomatix Process Simulate (Todas las versiones menor que la versi\u00f3n V2606). Una ruta de b\u00fasqueda no confiable en el SDK del cliente IAM podr\u00eda permitir a un usuario autenticado habilitar potencialmente la escalada de privilegios a trav\u00e9s de acceso local."
          }
        ],
        "id": "CVE-2025-40945",
        "lastModified": "2026-10-05T15:10:00.590",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 5.9,
              "source": "productcert@siemens.com",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "productcert@siemens.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-40945",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T12:16:50.783446Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-07-14T10:16:30.783",
        "references": [
          {
            "source": "productcert@siemens.com",
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html"
          }
        ],
        "sourceIdentifier": "productcert@siemens.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-426"
              }
            ],
            "source": "productcert@siemens.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-40945",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-14T12:16:50.783446Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-14T12:16:55.649Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unknown",
              "product": "COMOS V10.4.5",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V10.4.5.0.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "COMOS V10.6",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V10.6.1",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Designcenter NX",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2512.7000",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Simcenter 3D",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2512.7000",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Simcenter Femap V2506",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2506.0003",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Simcenter Femap V2512",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2512.0002",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Simcenter Nastran",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2606",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Simcenter STAR-CCM+",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2606",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Solid Edge SE2025",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V225.0 Update 13",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Solid Edge SE2026",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V226.0 Update 04",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Teamcenter Visualization V2412",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2412.0012",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Teamcenter Visualization V2506",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2506.0009",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Teamcenter Visualization V2512",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2512.2605",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Tecnomatix Plant Simulation V2404",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2404.0022",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Tecnomatix Plant Simulation V2504",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2504.0010",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unknown",
              "product": "Tecnomatix Process Simulate",
              "vendor": "Siemens",
              "versions": [
                {
                  "lessThan": "V2606",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in COMOS V10.4.5 (All versions \u003c V10.4.5.0.2), COMOS V10.6 (All versions \u003c V10.6.1), Designcenter NX (All versions \u003c V2512.7000), Simcenter 3D (All versions \u003c V2512.7000), Simcenter Femap V2506 (All versions \u003c V2506.0003), Simcenter Femap V2512 (All versions \u003c V2512.0002), Simcenter Nastran (All versions \u003c V2606), Simcenter STAR-CCM+ (All versions \u003c V2606), Solid Edge SE2025 (All versions \u003c V225.0 Update 13), Solid Edge SE2026 (All versions \u003c V226.0 Update 04), Teamcenter Visualization V2412 (All versions \u003c V2412.0012), Teamcenter Visualization V2506 (All versions \u003c V2506.0009), Teamcenter Visualization V2512 (All versions \u003c V2512.2605), Tecnomatix Plant Simulation V2404 (All versions \u003c V2404.0022), Tecnomatix Plant Simulation V2504 (All versions \u003c V2504.0010), Tecnomatix Process Simulate (All versions \u003c V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 6.7,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            {
              "cvssV4_0": {
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-426",
                  "description": "CWE-426: Untrusted Search Path",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-14T09:19:08.857Z",
            "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
            "shortName": "siemens"
          },
          "references": [
            {
              "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "assignerShortName": "siemens",
        "cveId": "CVE-2025-40945",
        "datePublished": "2026-07-14T09:19:08.857Z",
        "dateReserved": "2025-04-16T09:06:15.879Z",
        "dateUpdated": "2026-07-14T12:16:59.871Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2026-09978 (CVE-2025-40945)

Vulnerability from fstec – Published: 2026-07-17 – Updated: 2026-07-17 – View on bdu.fstec.ru Fixed

Title

Уязвимость инженерного и промышленного программного обеспечения Siemens, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость инженерного и промышленного программного обеспечения Siemens связана с использованием ненадёжного пути поиска. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

7.8 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-426 - Ненадежный путь поиска

Aliases

CVE-2025-40945, SSA-288252

References

1 reference

URL
https://cert-portal.siemens.com/productcert/html/ssa-288252.html

Impacted products

11 products from 1 vendor

Vendors

Siemens AG

Products

Solid Edge SE2025, Solid Edge SE2026, COMOS, Designcenter NX, Simcenter 3D, Simcenter Femap, Simcenter Nastran, Siemens STAR-CCM+, Teamcenter Visualization, Tecnomatix Plant Simulation, Tecnomatix Process Simulate

Versions

до 225.0 Update 13 (Solid Edge SE2025), до 226.0 Update 04 (Solid Edge SE2026), до 10.4.5.0.2 (COMOS), до 10.6.1 (COMOS), до 2512.7000 (Designcenter NX), до 2512.7000 (Simcenter 3D), до 2506.0003 (Simcenter Femap), до 2512.0002 (Simcenter Femap), до 2606 (Simcenter Nastran), до 2606 (Siemens STAR-CCM+), до 2412.0012 (Teamcenter Visualization), до 2506.0009 (Teamcenter Visualization), до 2512.2605 (Teamcenter Visualization), до 2504.0010 (Tecnomatix Plant Simulation), до 2606 (Tecnomatix Process Simulate)

Product types

Application software, Средство АСУ ТП, Industrial control system software

Mitigations

Использование рекомендаций: https://cert-portal.siemens.com/productcert/html/ssa-288252.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": "AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 225.0 Update 13 (Solid Edge SE2025), \u0434\u043e 226.0 Update 04 (Solid Edge SE2026), \u0434\u043e 10.4.5.0.2 (COMOS), \u0434\u043e 10.6.1 (COMOS), \u0434\u043e 2512.7000 (Designcenter NX), \u0434\u043e 2512.7000 (Simcenter 3D), \u0434\u043e 2506.0003 (Simcenter Femap), \u0434\u043e 2512.0002 (Simcenter Femap), \u0434\u043e 2606 (Simcenter Nastran), \u0434\u043e 2606 (Siemens STAR-CCM+), \u0434\u043e 2412.0012 (Teamcenter Visualization), \u0434\u043e 2506.0009 (Teamcenter Visualization), \u0434\u043e 2512.2605 (Teamcenter Visualization), \u0434\u043e 2504.0010 (Tecnomatix Plant Simulation), \u0434\u043e 2606 (Tecnomatix Process Simulate)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://cert-portal.siemens.com/productcert/html/ssa-288252.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.07.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "17.07.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.07.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-09978",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-40945, SSA-288252",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Solid Edge SE2025, Solid Edge SE2026, COMOS, Designcenter NX, Simcenter 3D, Simcenter Femap, Simcenter Nastran, Siemens STAR-CCM+, Teamcenter Visualization, Tecnomatix Plant Simulation, Tecnomatix Process Simulate",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u0433\u043e \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u043f\u043e\u0438\u0441\u043a\u0430 (CWE-426)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u0433\u043e \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-426",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,5)"
}

CNVD-2026-29395

Vulnerability from cnvd - Published: 2026-07-28

Title

Siemens COMOS权限许可和访问控制问题漏洞

Description

Siemens Comos是德国Siemens公司的一个工厂工程软件解决方案。 Siemens COMOS存在权限许可和访问控制问题漏洞，该漏洞源于IAM Client SDK中存在不可信搜索路径，攻击者可利用该漏洞通过本地访问提升权限。

Severity

中

Patch Name

Siemens COMOS权限许可和访问控制问题漏洞的补丁

Patch Description

Siemens Comos是德国Siemens公司的一个工厂工程软件解决方案。 Siemens COMOS存在权限许可和访问控制问题漏洞，该漏洞源于IAM Client SDK中存在不可信搜索路径，攻击者可利用该漏洞通过本地访问提升权限。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-288252.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-288252.html

Impacted products

Name
['Siemens COMOS V10.4.5 <V10.4.5.0.2', 'Siemens COMOS V10.6 <V10.6.1', 'Siemens Designcenter NX <V2512.7000', 'SIEMENS Simcenter 3D <V2512.7000', 'Siemens Simcenter Femap V2506 <V2506.0003', 'Siemens Simcenter Femap V2512 <V2512.0002', 'SIEMENS Simcenter Nastran <V2606', 'Siemens Simcenter STAR-CCM+ <V2606', 'Siemens Solid Edge SE2025 <V225.0 Update 13', 'SIEMENS Solid Edge SE2026 <V226.0 Update 04', 'Siemens Teamcenter Visualization V2412 <V2412.0012', 'Siemens Teamcenter Visualization V2506 <V2506.0009', 'Siemens Teamcenter Visualization V2512 <V2512.2605', 'Siemens Tecnomatix Plant Simulation V2404 <V2404.0022', 'Siemens Tecnomatix Plant Simulation V2504 <V2504.0010', 'Siemens Tecnomatix Process Simulate <V2606']

Name

['Siemens COMOS V10.4.5 <V10.4.5.0.2', 'Siemens COMOS V10.6 <V10.6.1', 'Siemens Designcenter NX <V2512.7000', 'SIEMENS Simcenter 3D <V2512.7000', 'Siemens Simcenter Femap V2506 <V2506.0003', 'Siemens Simcenter Femap V2512 <V2512.0002', 'SIEMENS Simcenter Nastran <V2606', 'Siemens Simcenter STAR-CCM+ <V2606', 'Siemens Solid Edge SE2025 <V225.0 Update 13', 'SIEMENS Solid Edge SE2026 <V226.0 Update 04', 'Siemens Teamcenter Visualization V2412 <V2412.0012', 'Siemens Teamcenter Visualization V2506 <V2506.0009', 'Siemens Teamcenter Visualization V2512 <V2512.2605', 'Siemens Tecnomatix Plant Simulation V2404 <V2404.0022', 'Siemens Tecnomatix Plant Simulation V2504 <V2504.0010', 'Siemens Tecnomatix Process Simulate <V2606']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-40945"
    }
  },
  "description": "Siemens Comos\u662f\u5fb7\u56fdSiemens\u516c\u53f8\u7684\u4e00\u4e2a\u5de5\u5382\u5de5\u7a0b\u8f6f\u4ef6\u89e3\u51b3\u65b9\u6848\u3002\n\nSiemens COMOS\u5b58\u5728\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eIAM Client SDK\u4e2d\u5b58\u5728\u4e0d\u53ef\u4fe1\u641c\u7d22\u8def\u5f84\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u672c\u5730\u8bbf\u95ee\u63d0\u5347\u6743\u9650\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-288252.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-29395",
  "openTime": "2026-07-28",
  "patchDescription": "Siemens Comos\u662f\u5fb7\u56fdSiemens\u516c\u53f8\u7684\u4e00\u4e2a\u5de5\u5382\u5de5\u7a0b\u8f6f\u4ef6\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nSiemens COMOS\u5b58\u5728\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eIAM Client SDK\u4e2d\u5b58\u5728\u4e0d\u53ef\u4fe1\u641c\u7d22\u8def\u5f84\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u672c\u5730\u8bbf\u95ee\u63d0\u5347\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens COMOS\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens COMOS V10.4.5 \u003cV10.4.5.0.2",
      "Siemens COMOS V10.6 \u003cV10.6.1",
      "Siemens Designcenter NX \u003cV2512.7000",
      "SIEMENS Simcenter 3D \u003cV2512.7000",
      "Siemens Simcenter Femap V2506 \u003cV2506.0003",
      "Siemens Simcenter Femap V2512 \u003cV2512.0002",
      "SIEMENS Simcenter Nastran \u003cV2606",
      "Siemens Simcenter STAR-CCM+ \u003cV2606",
      "Siemens Solid Edge SE2025 \u003cV225.0 Update 13",
      "SIEMENS Solid Edge SE2026 \u003cV226.0 Update 04",
      "Siemens Teamcenter Visualization V2412 \u003cV2412.0012",
      "Siemens Teamcenter Visualization V2506 \u003cV2506.0009",
      "Siemens Teamcenter Visualization V2512 \u003cV2512.2605",
      "Siemens Tecnomatix Plant Simulation V2404 \u003cV2404.0022",
      "Siemens Tecnomatix Plant Simulation V2504 \u003cV2504.0010",
      "Siemens Tecnomatix Process Simulate \u003cV2606"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html",
  "serverity": "\u4e2d",
  "submitTime": "2026-07-21",
  "title": "Siemens COMOS\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e"
}

FKIE_CVE-2025-40945

Vulnerability from fkie_nvd - Published: 2026-07-14 10:16 - Updated: 2026-10-05 15:10

Severity

6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	productcert@siemens.com	https://cert-portal.siemens.com/productcert/html/ssa-288252.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "COMOS V10.4.5",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.4.5.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "COMOS V10.6",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V10.6.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Designcenter NX",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.7000",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter 3D",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.7000",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Femap V2506",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2506.0003",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Femap V2512",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.0002",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter Nastran",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Simcenter STAR-CCM+",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Solid Edge SE2025",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V225.0 Update 13",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Solid Edge SE2026",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V226.0 Update 04",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2412",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2412.0012",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2506",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2506.0009",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Teamcenter Visualization V2512",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2512.2605",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Plant Simulation V2404",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2404.0022",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Plant Simulation V2504",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2504.0010",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Tecnomatix Process Simulate",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2606",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "productcert@siemens.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in COMOS V10.4.5 (All versions \u003c V10.4.5.0.2), COMOS V10.6 (All versions \u003c V10.6.1), Designcenter NX (All versions \u003c V2512.7000), Simcenter 3D (All versions \u003c V2512.7000), Simcenter Femap V2506 (All versions \u003c V2506.0003), Simcenter Femap V2512 (All versions \u003c V2512.0002), Simcenter Nastran (All versions \u003c V2606), Simcenter STAR-CCM+ (All versions \u003c V2606), Solid Edge SE2025 (All versions \u003c V225.0 Update 13), Solid Edge SE2026 (All versions \u003c V226.0 Update 04), Teamcenter Visualization V2412 (All versions \u003c V2412.0012), Teamcenter Visualization V2506 (All versions \u003c V2506.0009), Teamcenter Visualization V2512 (All versions \u003c V2512.2605), Tecnomatix Plant Simulation V2404 (All versions \u003c V2404.0022), Tecnomatix Plant Simulation V2504 (All versions \u003c V2504.0010), Tecnomatix Process Simulate (All versions \u003c V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en COMOS V10.4.5 (Todas las versiones menor que la versi\u00f3n V10.4.5.0.2), COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), Designcenter NX (Todas las versiones menor que la versi\u00f3n V2512.7000), Simcenter 3D (Todas las versiones menor que la versi\u00f3n V2512.7000), Simcenter Femap V2506 (Todas las versiones menor que la versi\u00f3n V2506.0003), Simcenter Femap V2512 (Todas las versiones menor que la versi\u00f3n V2512.0002), Simcenter Nastran (Todas las versiones menor que la versi\u00f3n V2606), Simcenter STAR-CCM+ (Todas las versiones menor que la versi\u00f3n V2606), Solid Edge SE2025 (Todas las versiones menor que la versi\u00f3n V225.0 Update 13), Solid Edge SE2026 (Todas las versiones menor que la versi\u00f3n V226.0 Update 04), Teamcenter Visualization V2412 (Todas las versiones menor que la versi\u00f3n V2412.0012), Teamcenter Visualization V2506 (Todas las versiones menor que la versi\u00f3n V2506.0009), Teamcenter Visualization V2512 (Todas las versiones menor que la versi\u00f3n V2512.2605), Tecnomatix Plant Simulation V2404 (Todas las versiones menor que la versi\u00f3n V2404.0022), Tecnomatix Plant Simulation V2504 (Todas las versiones menor que la versi\u00f3n V2504.0010), Tecnomatix Process Simulate (Todas las versiones menor que la versi\u00f3n V2606). Una ruta de b\u00fasqueda no confiable en el SDK del cliente IAM podr\u00eda permitir a un usuario autenticado habilitar potencialmente la escalada de privilegios a trav\u00e9s de acceso local."
    }
  ],
  "id": "CVE-2025-40945",
  "lastModified": "2026-10-05T15:10:00.590",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "productcert@siemens.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.5,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "productcert@siemens.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-40945",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-14T12:16:50.783446Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-14T10:16:30.783",
  "references": [
    {
      "source": "productcert@siemens.com",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-426"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    }
  ]
}

GHSA-FH68-JJ27-GPHG

Vulnerability from github – Published: 2026-07-14 12:31 – Updated: 2026-07-14 12:31

Details

Severity

6.7 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8.5 (High)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-40945"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-426"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-14T10:16:30Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability has been identified in COMOS V10.4.5 (All versions \u003c V10.4.5.0.2), COMOS V10.6 (All versions \u003c V10.6.1), Designcenter NX (All versions \u003c V2512.7000), Simcenter 3D (All versions \u003c V2512.7000), Simcenter Femap V2506 (All versions \u003c V2506.0003), Simcenter Femap V2512 (All versions \u003c V2512.0002), Simcenter Nastran (All versions \u003c V2606), Simcenter STAR-CCM+ (All versions \u003c V2606), Solid Edge SE2025 (All versions \u003c V225.0 Update 13), Solid Edge SE2026 (All versions \u003c V226.0 Update 04), Teamcenter Visualization V2412 (All versions \u003c V2412.0012), Teamcenter Visualization V2506 (All versions \u003c V2506.0009), Teamcenter Visualization V2512 (All versions \u003c V2512.2605), Tecnomatix Plant Simulation V2404 (All versions \u003c V2404.0022), Tecnomatix Plant Simulation V2504 (All versions \u003c V2504.0010), Tecnomatix Process Simulate (All versions \u003c V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.",
  "id": "GHSA-fh68-jj27-gphg",
  "modified": "2026-07-14T12:31:14Z",
  "published": "2026-07-14T12:31:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40945"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-288252.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

ICSA-26-202-05

Vulnerability from csaf_cisa - Published: 2026-07-14 00:00 - Updated: 2026-07-21 06:00

Summary

Siemens IAM Client

Scope

1 vulnerability in this advisory, including CVE-2025-40945.

CVE-2025-40945

Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known affected: 16 products

https://support.sw.siemens.com/product/222981661/ https://support.sw.siemens.com/product/246738425/ https://support.sw.siemens.com/product/297028302/

Open the full advisory

NCSC-2026-0229

Vulnerability from csaf_ncscnl - Published: 2026-07-14 13:45 - Updated: 2026-07-14 13:45

Summary

Kwetsbaarheden verholpen in Siemens producten

Scope

32 vulnerabilities in this advisory, including CVE-2025-40945.

CVE-2025-40945

A vulnerability in the IAM Client SDK's untrusted search path affects multiple Siemens products, potentially allowing authenticated users to escalate privileges via local access.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known affected: 167 products

Open the full advisory

SSA-288252

Vulnerability from csaf_siemens - Published: 2026-07-14 00:00 - Updated: 2026-07-14 00:00

Summary

SSA-288252: Unquoted Search Path Vulnerability in IAM Client

Scope

1 vulnerability in this advisory, including CVE-2025-40945.

CVE-2025-40945

Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known affected: 16 products

https://support.sw.siemens.com/product/222981661/ https://support.sw.siemens.com/product/246738425/ https://support.sw.siemens.com/product/297028302/

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-40945 (GCVE-0-2025-40945)

BDU:2026-09978 (CVE-2025-40945)

CNVD-2026-29395

FKIE_CVE-2025-40945

GHSA-FH68-JJ27-GPHG

ICSA-26-202-05

NCSC-2026-0229

SSA-288252

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour