CVE-2025-40745: simcenter 3d before 2506.6000 (exclusive); +13 more affected products

Affected technology

simcenter 3d · before 2506.6000 (exclusive)
siemens

simcenter femap · before 2506.6000 (exclusive)
siemens

simcenter star-ccm+ viewer · before 2602 (exclusive)
siemens

software center · before 3.5.8.2 (exclusive)
siemens

solid edge se2025 · before 225.0 (exclusive)
siemens

solid edge se2025 · 225.0
siemens

solid edge se2025 · 225.0 · update update_0001
siemens

solid edge se2025 · 225.0 · update update_0002
siemens

solid edge se2025 · 225.0 · update update_0003
siemens

solid edge se2025 · 225.0 · update update_0004
siemens

solid edge se2025 · 225.0 · update update_0005
siemens

solid edge se2025 · 225.0 · update update_0006
siemens

solid edge se2025 · 225.0 · update update_0007
siemens

solid edge se2025 · 225.0 · update update_0008
siemens

solid edge se2025 · 225.0 · update update_0009
siemens

solid edge se2025 · 225.0 · update update_0010
siemens

solid edge se2025 · 225.0 · update update_0011
siemens

solid edge se2025 · 225.0 · update update_0012
siemens

solid edge se2026 · before 226.0 (exclusive)
siemens

solid edge se2026 · 226.0
siemens

solid edge se2026 · 226.0 · update update_1
siemens

solid edge se2026 · 226.0 · update update_2
siemens

solid edge se2026 · 226.0 · update update_3
siemens

tecnomatix plant simulation · before 2504.0008 (exclusive)
siemens

Siemens Software Center · 0 to before V3.5.8.2
Siemens

Simcenter 3D · 0 to before V2506.6000
Siemens

Simcenter Femap · 0 to before V2506.0002
Siemens

Simcenter STAR-CCM+ · 0 to before V2602
Siemens

Solid Edge SE2025 · 0 to before V225.0 Update 13
Siemens

Solid Edge SE2026 · 0 to before V226.0 Update 04
Siemens

Tecnomatix Plant Simulation · 0 to before V2504.0008
Siemens

Description’s affected range: versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could perform man in the middle attacks. Vendor/CNA’s CVSS 4.0 assessment (base score 6.3/10) rates confidentiality impact as low; integrity and availability impact as none.