CVE-2025-40800

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-40800", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2025-04-16T08:50:26.973Z", "datePublished": "2025-12-09T10:44:23.488Z", "dateUpdated": "2026-03-10T16:07:47.742Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-03-10T16:07:47.742Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}], "affected": [{"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2412", "versions": [{"status": "affected", "version": "0", "lessThan": "V2412.8700", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2506", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter 3D", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Femap", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0002", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Solid Edge SE2025", "versions": [{"status": "affected", "version": "0", "lessThan": "V225.0 Update 10", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Solid Edge SE2026", "versions": [{"status": "affected", "version": "0", "lessThan": "V226.0 Update 1", "versionType": "custom"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "baseScore": 9.1, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-868571.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-09T14:27:11.176631Z", "id": "CVE-2025-40800", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-09T14:27:15.289Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-40800", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-12-09T14:27:11.176631Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-09T14:27:12.744Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}}, {"cvssV4_0": {"version": "4.0", "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2412", "versions": [{"status": "affected", "version": "0", "lessThan": "V2412.8700", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2506", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter 3D", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Femap", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0002", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Solid Edge SE2025", "versions": [{"status": "affected", "version": "0", "lessThan": "V225.0 Update 10", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Solid Edge SE2026", "versions": [{"status": "affected", "version": "0", "lessThan": "V226.0 Update 1", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-868571.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-03-10T16:07:47.742Z"}}}, "cveMetadata": {"cveId": "CVE-2025-40800", "state": "PUBLISHED", "dateUpdated": "2026-03-10T16:07:47.742Z", "dateReserved": "2025-04-16T08:50:26.973Z", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "datePublished": "2025-12-09T10:44:23.488Z", "assignerShortName": "siemens"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "COMOS V10.6", "vendor": "Siemens", "versions": [{"lessThan": "V10.6.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "COMOS V10.6", "vendor": "Siemens", "versions": [{"lessThan": "V10.6.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "NX V2412", "vendor": "Siemens", "versions": [{"lessThan": "V2412.8700", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "NX V2506", "vendor": "Siemens", "versions": [{"lessThan": "V2506.6000", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter 3D", "vendor": "Siemens", "versions": [{"lessThan": "V2506.6000", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter Femap", "vendor": "Siemens", "versions": [{"lessThan": "V2506.0002", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Solid Edge SE2025", "vendor": "Siemens", "versions": [{"lessThan": "V225.0 Update 10", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Solid Edge SE2026", "vendor": "Siemens", "versions": [{"lessThan": "V226.0 Update 1", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "productcert@siemens.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), NX V2412 (Todas las versiones menor que la versi\u00f3n V2412.8700), NX V2506 (Todas las versiones menor que la versi\u00f3n V2506.6000), Simcenter 3D (Todas las versiones menor que la versi\u00f3n V2506.6000), Simcenter Femap (Todas las versiones menor que la versi\u00f3n V2506.0002), Solid Edge SE2025 (Todas las versiones menor que la versi\u00f3n V225.0 Update 10), Solid Edge SE2026 (Todas las versiones menor que la versi\u00f3n V226.0 Update 1). El cliente IAM en los productos afectados carece de validaci\u00f3n de certificado del servidor al establecer conexiones TLS con el servidor de autorizaci\u00f3n. Esto podr\u00eda permitir a un atacante realizar un ataque man-in-the-middle."}], "id": "CVE-2025-40800", "lastModified": "2026-10-07T11:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "productcert@siemens.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "productcert@siemens.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-40800", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-12-09T14:27:11.176631Z", "version": "2.0.3"}}]}, "published": "2025-12-09T16:17:45.073", "references": [{"source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}, {"source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-868571.html"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "productcert@siemens.com", "type": "Secondary"}]}

{}

{"created": "2025-12-10T17:52:28.320056+00:00", "updated": "2025-12-10T17:52:28.320079+00:00", "vendors": ["siemens", "siemens$PRODUCT$comos", "siemens$PRODUCT$nx", "siemens$PRODUCT$simcenter_3d", "siemens$PRODUCT$simcenter_femap", "siemens$PRODUCT$solid_edge_se2025", "siemens$PRODUCT$solid_edge_se2026"]}