CVE-2025-40745

Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Analytics Toolkit are affected: Siemens Software Center vers:intdot/Simcenter 3D vers:intdot/Simcenter Femap vers:intdot/Simcenter STAR-CCM+ vers:intdot/Solid Edge SE2025 Solid Edge SE2026 Tecnomatix Plant Simulation vers:intdot/ CVSS Vendor Equipment Vulnerabilities v3 3.7 Siemens Siemens Analytics Toolkit Improper Certificate Validation Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany

EPSS 0.02% · 7.3th percentile