CVE-2025-40744 — Siemens / Solid Edge SE2025

CVE-2025-40744

Siemens / Solid Edge SE2025 PUBLISHED

Description (CNA)

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

Affected (CNA)

Vendor / product	Versions
Siemens / Solid Edge SE2025	affected 0 before V225.0 Update 11

CWE

CWE-295

References

https://cert-portal.siemens.com/productcert/html/ssa-522291.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.