CVE-2025-40801

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-40801", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2025-04-16T08:50:26.973Z", "datePublished": "2025-12-09T10:44:24.727Z", "dateUpdated": "2026-03-10T16:07:48.826Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-03-10T16:07:48.826Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}], "affected": [{"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "JT Bi-Directional Translator for STEP", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2412", "versions": [{"status": "affected", "version": "0", "lessThan": "V2412.8900", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2506", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter 3D", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Femap", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0002", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Studio", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0001", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter System Architect", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0001", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "V2504.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.2, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-710408.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-09T14:26:50.494757Z", "id": "CVE-2025-40801", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-09T14:26:55.244Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-40801", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-12-09T14:26:50.494757Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-09T14:26:52.670Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}}, {"cvssV4_0": {"version": "4.0", "baseScore": 9.2, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "COMOS V10.6", "versions": [{"status": "affected", "version": "0", "lessThan": "V10.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "JT Bi-Directional Translator for STEP", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2412", "versions": [{"status": "affected", "version": "0", "lessThan": "V2412.8900", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "NX V2506", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter 3D", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.6000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Femap", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0002", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter Studio", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0001", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Simcenter System Architect", "versions": [{"status": "affected", "version": "0", "lessThan": "V2506.0001", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Tecnomatix Plant Simulation", "versions": [{"status": "affected", "version": "0", "lessThan": "V2504.0007", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-710408.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-03-10T16:07:48.826Z"}}}, "cveMetadata": {"cveId": "CVE-2025-40801", "state": "PUBLISHED", "dateUpdated": "2026-03-10T16:07:48.826Z", "dateReserved": "2025-04-16T08:50:26.973Z", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "datePublished": "2025-12-09T10:44:24.727Z", "assignerShortName": "siemens"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "COMOS V10.6", "vendor": "Siemens", "versions": [{"lessThan": "V10.6.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "COMOS V10.6", "vendor": "Siemens", "versions": [{"lessThan": "V10.6.1", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "JT Bi-Directional Translator for STEP", "vendor": "Siemens", "versions": [{"lessThan": "*", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "NX V2412", "vendor": "Siemens", "versions": [{"lessThan": "V2412.8900", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "NX V2506", "vendor": "Siemens", "versions": [{"lessThan": "V2506.6000", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter 3D", "vendor": "Siemens", "versions": [{"lessThan": "V2506.6000", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter Femap", "vendor": "Siemens", "versions": [{"lessThan": "V2506.0002", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter Studio", "vendor": "Siemens", "versions": [{"lessThan": "V2506.0001", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Simcenter System Architect", "vendor": "Siemens", "versions": [{"lessThan": "V2506.0001", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Tecnomatix Plant Simulation", "vendor": "Siemens", "versions": [{"lessThan": "V2504.0007", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "productcert@siemens.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), COMOS V10.6 (Todas las versiones menor que la versi\u00f3n V10.6.1), JT Bi-Directional Translator for STEP (Todas las versiones), NX V2412 (Todas las versiones menor que la versi\u00f3n V2412.8900 con Cloud Entitlement (incluido como NX X)), NX V2506 (Todas las versiones menor que la versi\u00f3n V2506.6000 con Cloud Entitlement (incluido como NX X)), Simcenter 3D (Todas las versiones menor que la versi\u00f3n V2506.6000 con Cloud Entitlement (incluido como Simcenter X Mechanical)), Simcenter Femap (Todas las versiones menor que la versi\u00f3n V2506.0002 con Cloud Entitlement (incluido como Simcenter X Mechanical)), Simcenter Studio (Todas las versiones menor que la versi\u00f3n V2506.0001), Simcenter System Architect (Todas las versiones menor que la versi\u00f3n V2506.0001), Tecnomatix Plant Simulation (Todas las versiones menor que la versi\u00f3n V2504.0007). El SDK SALT carece de validaci\u00f3n de certificado de servidor al establecer conexiones TLS con el servidor de autorizaci\u00f3n. Esto podr\u00eda permitir a un atacante realizar un ataque man-in-the-middle."}], "id": "CVE-2025-40801", "lastModified": "2026-10-07T11:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "productcert@siemens.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "productcert@siemens.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-40801", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-12-09T14:26:50.494757Z", "version": "2.0.3"}}]}, "published": "2025-12-09T16:17:45.357", "references": [{"source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-212953.html"}, {"source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-710408.html"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "productcert@siemens.com", "type": "Secondary"}]}

{}

{"created": "2025-12-10T17:52:21.329501+00:00", "updated": "2025-12-10T17:52:21.329538+00:00", "vendors": ["siemens", "siemens$PRODUCT$comos", "siemens$PRODUCT$nx", "siemens$PRODUCT$simcenter_3d", "siemens$PRODUCT$simcenter_amesim", "siemens$PRODUCT$simcenter_femap", "siemens$PRODUCT$simcenter_studio", "siemens$PRODUCT$simcenter_system_architect", "siemens$PRODUCT$tecnomatix_plant_simulation"]}