Vulnerability · Published Dec 9, 2025 · Assigned by siemens
CVE-2025-40800
High 7.4
In plain English
A high-severity improper certificate validation in COMOS V10.6 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | COMOS V10.6 | 0 – before V10.6.1 |
| Siemens | COMOS V10.6 | 0 – before V10.6.1 |
| Siemens | NX V2412 | 0 – before V2412.8700 |
| Siemens | NX V2506 | 0 – before V2506.6000 |
| Siemens | Simcenter 3D | 0 – before V2506.6000 |
| Siemens | Simcenter Femap | 0 – before V2506.0002 |
| Siemens | Solid Edge SE2025 | 0 – before V225.0 Update 10 |
| Siemens | Solid Edge SE2026 | 0 – before V226.0 Update 1 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N