{"timestamp":"2026-07-14T12:16:50.783446Z","id":"CVE-2025-40945","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-426

https://cert-portal.siemens.com/productcert/html/ssa-288252.html

[{"vendor":"Siemens","product":"COMOS V10.4.5","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V10.4.5.0.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"COMOS V10.6","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V10.6.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Designcenter NX","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2512.7000","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter 3D","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2512.7000","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter Femap V2506","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2506.0003","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter Femap V2512","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2512.0002","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter Nastran","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2606","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter STAR-CCM+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2606","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Solid Edge SE2025","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V225.0 Update 13","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Solid Edge SE2026","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V226.0 Update 04","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Teamcenter Visualization V2412","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2412.0012","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Teamcenter Visualization V2506","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2506.0009