Login Request a demo
Low severity · published Apr 14, 2026
CVE-2025-40745
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002),…
3.7
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Siemens Software Center · Siemens
before V3.5.8.2 · source: vendor
S3
Simcenter 3D · Siemens
before V2506.6000 · source: vendor, NVD
SF
Simcenter Femap · Siemens
before V2506.0002 · source: vendor, NVD
SS
Simcenter STAR-CCM+ · Siemens
before V2602 · source: vendor
SE
Solid Edge SE2025 · Siemens
before V225.0 Update 13 · source: vendor, NVD
SE
Solid Edge SE2026 · Siemens
before V226.0 Update 04 · source: vendor, NVD
TP
Tecnomatix Plant Simulation · Siemens
before V2504.0008 · source: vendor, NVD
SS
Simcenter Star-ccm+ Viewer · Siemens
before 2602 · source: NVD
SC
Software Center · Siemens
before 3.5.8.2 · source: NVD
Affected product
SS
Siemens Software Center
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40745
Mitigation
https://cert-portal.siemens.com/productcert/html/ssa-981622.html
More from Siemens Software Center
6.7
CVE-2026-110936
Siemens Software Center Uncontrolled Search Path Element Vulnerability