CVE-2025-40945

mediumPriorität · verfolgen · 0EPSS 0.002 · 6. PerzentilDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (6th) EPSS

CVSS 6.7 · medium

Is it mine?

258 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCOMOS V10.4.5siemens_psirt
Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
BehobenCOMOS V10.6siemens_psirt
Update to V10.6.1 or later version
https://support.sw.siemens.com/product/222981661/
BehobenDesigncenter NXsiemens_psirt
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/209349590/
BehobenSimcenter 3Dsiemens_psirt
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSimcenter Femap V2506siemens_psirt
Update to V2506.0003 or later version
https://support.sw.siemens.com/product/275652363/
BehobenSimcenter Femap V2512siemens_psirt
Update to V2512.0002 or later version
https://support.sw.siemens.com/product/275652363/
BehobenSimcenter Nastransiemens_psirt
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSimcenter STAR-CCM+siemens_psirt
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSolid Edge SE2025siemens_psirt
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/
BehobenSolid Edge SE2026siemens_psirt
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/
BehobenTeamcenter Visualization V2412siemens_psirt
Update to V2412.0012 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTeamcenter Visualization V2506siemens_psirt
Update to V2506.0009 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTeamcenter Visualization V2512siemens_psirt
Update to V2512.2605 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTecnomatix Plant Simulation V2404siemens_psirt
Update to V2404.0022 or later version
https://support.sw.siemens.com/product/297028302/
BehobenTecnomatix Plant Simulation V2504siemens_psirt
Update to V2504.0010 or later version
https://support.sw.siemens.com/product/297028302/
BehobenTecnomatix Process Simulatesiemens_psirt
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
BehobenCOMOS V10.4.5cisa_csaf_ot
Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
BehobenCOMOS V10.6cisa_csaf_ot
Update to V10.6.1 or later version
https://support.sw.siemens.com/product/222981661/
BehobenDesigncenter NXcisa_csaf_ot
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/209349590/
BehobenSimcenter 3Dcisa_csaf_ot
Update to V2512.7000 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSimcenter Femap V2506cisa_csaf_ot
Update to V2506.0003 or later version
https://support.sw.siemens.com/product/275652363/
BehobenSimcenter Femap V2512cisa_csaf_ot
Update to V2512.0002 or later version
https://support.sw.siemens.com/product/275652363/
BehobenSimcenter Nastrancisa_csaf_ot
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSimcenter STAR-CCM+cisa_csaf_ot
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/
BehobenSolid Edge SE2025cisa_csaf_ot
Update to V225.0 Update 13 or later version
https://support.sw.siemens.com/product/246738425/
BehobenSolid Edge SE2026cisa_csaf_ot
Update to V226.0 Update 04 or later version
https://support.sw.siemens.com/product/246738425/
BehobenTeamcenter Visualization V2412cisa_csaf_ot
Update to V2412.0012 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTeamcenter Visualization V2506cisa_csaf_ot
Update to V2506.0009 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTeamcenter Visualization V2512cisa_csaf_ot
Update to V2512.2605 or later version
https://support.sw.siemens.com/product/229029598/
BehobenTecnomatix Plant Simulation V2404cisa_csaf_ot
Update to V2404.0022 or later version
https://support.sw.siemens.com/product/297028302/
BehobenTecnomatix Plant Simulation V2504cisa_csaf_ot
Update to V2504.0010 or later version
https://support.sw.siemens.com/product/297028302/
BehobenTecnomatix Process Simulatecisa_csaf_ot
Update to V2606 or later version
https://support.sw.siemens.com/product/289054037/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.9–8.5

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 0.8 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v4.08.5highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.08.5highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.05.9mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-426USCWE-426USCWE-426USCWE-426USCWE-426US

betroffene Produkte (258)

Betroffene Produkte und Versionsbereiche.

COMOS V10.4.5 < V10.4.5.0.2alle Versionencisa_csaf_otUS
COMOS V10.6 < V10.6.1alle Versionencisa_csaf_otUS
Designcenter NX < V2512.7000alle Versionencisa_csaf_otUS
Simcenter 3D < V2512.7000alle Versionencisa_csaf_otUS
Simcenter Femap V2506 < V2506.0003alle Versionencisa_csaf_otUS
Simcenter Femap V2512 < V2512.0002alle Versionencisa_csaf_otUS
Simcenter Nastran < V2606alle Versionencisa_csaf_otUS
Simcenter STAR-CCM+ < V2606alle Versionencisa_csaf_otUS
Solid Edge SE2025 < V225.0.13.3alle Versionencisa_csaf_otUS
Solid Edge SE2026 < V226.0.04.003alle Versionencisa_csaf_otUS
Teamcenter Visualization V2412 < V2412.0012alle Versionencisa_csaf_otUS
Teamcenter Visualization V2506 < V2506.0009alle Versionencisa_csaf_otUS
Teamcenter Visualization V2512 < V2512.2605alle Versionencisa_csaf_otUS
Tecnomatix Plant Simulation V2404 < V2404.0022alle Versionencisa_csaf_otUS
Tecnomatix Plant Simulation V2504 < V2504.0010alle Versionencisa_csaf_otUS
Tecnomatix Process Simulate < V2606alle Versionencisa_csaf_otUS
Siemens COMOS V10.4.5≤ vers:intdot/<10.4.5.0.2cisa_csaf_otUS
Siemens COMOS V10.6≤ vers:intdot/<10.6.1cisa_csaf_otUS
Siemens Designcenter NX≤ vers:intdot/<2512.7000cisa_csaf_otUS
Siemens Simcenter 3D≤ vers:intdot/<2512.7000cisa_csaf_otUS

20 von 258 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2026-0229Kwetsbaarheden verholpen in Siemens productenNL2026-07-14csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als CADRA, IAM, Mendix, OpCenter, RUGGEDCOM, SIDIS en SIMATIC.
SSA-288252SSA-288252: Unquoted Search Path Vulnerability in IAM Client2026-07-14csaf · siemens_psirtDE
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
ICSA-26-202-05Siemens IAM Client2026-07-14icsa · cisa_csaf_otUS
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2026-07-14geändert 2026-07-17

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan