Siemens IAM Client
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40945US | — | — | ||
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (… | ||||
references
External citations — patches, advisories, analysis.
- SSA-288252: Unquoted Search Path Vulnerability in IAM Client - CSAF Versionself
- SSA-288252: Unquoted Search Path Vulnerability in IAM Client - HTML Versionself
- ICS Advisory ICSA-26-202-05 JSONself
- ICS Advisory ICSA-26-202-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (16)
- FixedCOMOS V10.4.5
Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
- FixedCOMOS V10.6
Update to V10.6.1 or later version
https://support.sw.siemens.com/product/222981661/ - FixedDesigncenter NX
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/209349590/ - FixedSimcenter 3D
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter Femap V2506
Update to V2506.0003 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Femap V2512
Update to V2512.0002 or later version
https://support.sw.siemens.com/product/275652363/ - FixedSimcenter Nastran
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSimcenter STAR-CCM+
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/ - FixedSolid Edge SE2025
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/ - FixedSolid Edge SE2026
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/ - FixedTeamcenter Visualization V2412
Update to V2412.0012 or later version
https://support.sw.siemens.com/product/229029598/ - FixedTeamcenter Visualization V2506
Update to V2506.0009 or later version
https://support.sw.siemens.com/product/229029598/ - FixedTeamcenter Visualization V2512
Update to V2512.2605 or later version
https://support.sw.siemens.com/product/229029598/ - FixedTecnomatix Plant Simulation V2404
Update to V2404.0022 or later version
https://support.sw.siemens.com/product/297028302/ - FixedTecnomatix Plant Simulation V2504
Update to V2504.0010 or later version
https://support.sw.siemens.com/product/297028302/ - FixedTecnomatix Process Simulate
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan