ICSA-26-111-04

Siemens Analytics Toolkit

view advisory published 2026-04-14

Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-40745US	—	0.14% (3rd)	—	2026-04-14
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Sim…

references

External citations — patches, advisories, analysis.

remediations (7)

FixedSiemens Software Center
Update to V3.5.8.2 or later version
https://www.sw.siemens.com/en-US/siemens-software-center/
FixedSimcenter 3D
Update to V2506.6000 or later version
https://support.sw.siemens.com/product/289054037/
FixedSimcenter Femap
Update to V2506.0002 or later version
https://support.sw.siemens.com/product/275652363/
FixedSimcenter STAR-CCM+
Update to V2602 or later version
https://support.sw.siemens.com/product/226870983/
FixedSolid Edge SE2025
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/
FixedSolid Edge SE2026
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/
FixedTecnomatix Plant Simulation
Update to V2504.0008 or later version
https://support.sw.siemens.com/product/297028302/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan