Description (CNA)
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Siemens Software Center | affected 0 before V3.5.8.2 |
| Siemens / Simcenter 3D | affected 0 before V2506.6000 |
| Siemens / Simcenter Femap | affected 0 before V2506.0002 |
| Siemens / Simcenter STAR-CCM+ | affected 0 before V2602 |
| Siemens / Solid Edge SE2025 | affected 0 before V225.0 Update 13 |
| Siemens / Solid Edge SE2026 | affected 0 before V226.0 Update 04 |
| Siemens / Tecnomatix Plant Simulation | affected 0 before V2504.0008 |
CWE
CWE-295
References
ADP enrichment
No English description supplied.
No references supplied.