Siemens Solid Edge
view advisory published 2025-11-11
Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40744US | — | — | ||
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge - CSAF Versionself
- SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge - HTML Versionself
- ICS Advisory ICSA-25-317-14 JSONself
- ICS Advisory ICSA-25-317-14 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedSolid Edge SE2025
Update to V225.0 Update 11 or later version
https://support.sw.siemens.com/product/246738425/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan