SSA-288252: Unquoted Search Path Vulnerability in IAM Client
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40945US | — | — | ||
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (16)
- BehobenCOMOS V10.4.5
Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
- BehobenCOMOS V10.6
Update to V10.6.1 or later version
https://support.sw.siemens.com/product/222981661/ - BehobenDesigncenter NX
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/209349590/ - BehobenSimcenter 3D
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter Femap V2506
Update to V2506.0003 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Femap V2512
Update to V2512.0002 or later version
https://support.sw.siemens.com/product/275652363/ - BehobenSimcenter Nastran
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSimcenter STAR-CCM+
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/ - BehobenSolid Edge SE2025
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenSolid Edge SE2026
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/ - BehobenTeamcenter Visualization V2412
Update to V2412.0012 or later version
https://support.sw.siemens.com/product/229029598/ - BehobenTeamcenter Visualization V2506
Update to V2506.0009 or later version
https://support.sw.siemens.com/product/229029598/ - BehobenTeamcenter Visualization V2512
Update to V2512.2605 or later version
https://support.sw.siemens.com/product/229029598/ - BehobenTecnomatix Plant Simulation V2404
Update to V2404.0022 or later version
https://support.sw.siemens.com/product/297028302/ - BehobenTecnomatix Plant Simulation V2504
Update to V2504.0010 or later version
https://support.sw.siemens.com/product/297028302/ - BehobenTecnomatix Process Simulate
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan