Description
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Published: 2025-11-11
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 12 Nov 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 12 Nov 2025 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens solid Edge Se2025
Vendors & Products Siemens
Siemens solid Edge Se2025

Tue, 11 Nov 2025 20:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Weaknesses CWE-295
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Siemens Solid Edge Se2025
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-11-12T20:12:57.643Z

Reserved: 2025-04-16T08:39:30.030Z

Link: CVE-2025-40744

cve-icon Vulnrichment

Updated: 2025-11-12T20:07:06.743Z

cve-icon NVD

Status : Deferred

Published: 2025-11-11T21:15:37.557

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-40744

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-11-12T12:36:58Z

Weaknesses