CVE-2025-40945 - A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606)

Back Back to CVE browser

HIGH

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606)

Published Jul 14, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.16%

Description

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Vendor Siemens Product Comos V10.4.5 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V10.4.5.0.2
Vendor Siemens Product Comos V10.6 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V10.6.1
Vendor Siemens Product Designcenter NX Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2512.7000
Vendor Siemens Product Simcenter 3D Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2512.7000
Vendor Siemens Product Simcenter Femap V2506 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2506.0003
Vendor Siemens Product Simcenter Femap V2512 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2512.0002
Vendor Siemens Product Simcenter Nastran Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2606
Vendor Siemens Product Simcenter STAR-CCM+ Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2606
Vendor Siemens Product Solid Edge SE2025 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V225.0 Update 13
Vendor Siemens Product Solid Edge SE2026 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V226.0 Update 04
Vendor Siemens Product Teamcenter Visualization V2412 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2412.0012
Vendor Siemens Product Teamcenter Visualization V2506 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2506.0009
Vendor Siemens Product Teamcenter Visualization V2512 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2512.2605
Vendor Siemens Product Tecnomatix Plant Simulation V2404 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2404.0022
Vendor Siemens Product Tecnomatix Plant Simulation V2504 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2504.0010
Vendor Siemens Product Tecnomatix Process Simulate Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2606

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Description

Affected products

Remediation

References (1)

Change history (0)