ICSA-25-345-05

Siemens Advanced Licensing (SALT) Toolkit

Advisory ansehen veröffentlicht 2025-12-09

Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing (SALT) Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-40801US	—	0.26% (18th)	—	2025-12-09
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (A…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (9)

Kein Fix geplantJT Bi-Directional Translator for STEP
Currently no fix is planned
BehobenCOMOS V10.6
Update to V10.6.1 or later version
https://support.sw.siemens.com/product/222981661/
BehobenNX V2412
Update to V2412.8900 or later version
https://support.sw.siemens.com/product/209349590/
BehobenNX V2506
Update to V2506.6000 or later version
https://support.sw.siemens.com/product/209349590/
BehobenSimcenter 3D
Update to V2506.6000 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSimcenter Femap
Update to V2506.0002 or later version
https://support.sw.siemens.com/product/275652363/
BehobenSimcenter Studio
Update to V2506.0001 or later version
BehobenSimcenter System Architect
Update to V2506.0001 or later version
https://support.sw.siemens.com/product/273211926/
BehobenTecnomatix Plant Simulation
Update to V2504.0007 or later version
https://support.sw.siemens.com/product/297028302/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan