CVE-2025-40945

No fix known EPSS <1%CVSS 6.7

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

Published 2026-07-14 · CVE record · OSV

Products: Siemens COMOS V10.4.5, Siemens COMOS V10.6, Siemens Designcenter NX, Siemens Simcenter 3D, Siemens Simcenter Femap V2506, Siemens Simcenter Femap V2512, siemens simcenter_nastran, Siemens Simcenter STAR-CCM+, Siemens Solid Edge SE2025, Siemens Solid Edge SE2026, Siemens Teamcenter Visualization V2412, Siemens Teamcenter Visualization V2506, Siemens Teamcenter Visualization V2512, Siemens Tecnomatix Plant Simulation V2404, Siemens Tecnomatix Plant Simulation V2504, Siemens Tecnomatix Process Simulate