Siemens Software Center and Solid Edge
Advisory ansehen veröffentlicht 2025-11-11
Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40827US | — | — | ||
A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-365596: DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge - CSAF Versionself
- SSA-365596: DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge - HTML Versionself
- ICS Advisory ICSA-25-317-17 JSONself
- ICS Advisory ICSA-25-317-17 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSiemens Software Center
Update to V3.5 or later version
https://www.sw.siemens.com/en-US/siemens-software-center/ - BehobenSolid Edge SE2025
Update to V225.0 Update 10 or later version
https://support.sw.siemens.com/product/246738425/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan