SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40745US | — | — | ||
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Sim… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- BehobenSiemens Software Center
Update to V3.5.8.2 or later version
https://www.sw.siemens.com/en-US/siemens-software-center/ - BehobenSimcenter 3D
Update to V2506.6000 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Femap
Update to V2506.0002 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter STAR-CCM+
Update to V2602 or later version
https://support.sw.siemens.com/product/226870983/ - BehobenSolid Edge SE2025
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenSolid Edge SE2026
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenTecnomatix Plant Simulation
Update to V2504.0008 or later version
https://support.sw.siemens.com/product/297028302/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan