Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-40945

Quick assessment

Affected
Siemens COMOS V10.4.5
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Siemens Comos是德国Siemens公司的一个工厂工程软件解决方案。 Siemens COMOS存在权限许可和访问控制问题漏洞，该漏洞源于IAM Client SDK中存在不可信搜索路径，可能允许经过身份验证的用户通过本地访问提升权限。以下版本受到影响：COMOS V10.4.5版本（V10.4.5.0.2之前版本）、COMOS V10.6版本（V10.6.1之前版本）、Designcenter NX版本（V2512.7000之前版本）、Simcenter 3D版本（V2512.7000之前版本

CVSS 6.7 · Medium EPSS 0.16% · P5

Possible ATT&CK Techniques 1 AI

T1528 · Steal Application Access Token

Affected Version Matrix 16

VendorProduct Version RangeStatus
Siemens COMOS V10.4.5 < V10.4.5.0.2 affected
Siemens COMOS V10.6 < V10.6.1 affected
Siemens Designcenter NX < V2512.7000 affected
Siemens Simcenter 3D < V2512.7000 affected
Siemens Simcenter Femap V2506 < V2506.0003 affected
Siemens Simcenter Femap V2512 < V2512.0002 affected
Siemens Simcenter Nastran < V2606 affected
Siemens Simcenter STAR-CCM+ < V2606 affected
Siemens Solid Edge SE2025 < V225.0 Update 13 affected
Siemens Solid Edge SE2026 < V226.0 Update 04 affected
Siemens Teamcenter Visualization V2412 < V2412.0012 affected
Siemens Teamcenter Visualization V2506 < V2506.0009 affected
Siemens Teamcenter Visualization V2512 < V2512.2605 affected
Siemens Tecnomatix Plant Simulation V2404 < V2404.0022 affected
Siemens Tecnomatix Plant Simulation V2504 < V2504.0010 affected
Siemens Tecnomatix Process Simulate < V2606 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-40945

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不可信的搜索路径
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens COMOS 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens Comos是德国Siemens公司的一个工厂工程软件解决方案。 Siemens COMOS存在权限许可和访问控制问题漏洞，该漏洞源于IAM Client SDK中存在不可信搜索路径，可能允许经过身份验证的用户通过本地访问提升权限。以下版本受到影响：COMOS V10.4.5版本（V10.4.5.0.2之前版本）、COMOS V10.6版本（V10.6.1之前版本）、Designcenter NX版本（V2512.7000之前版本）、Simcenter 3D版本（V2512.7000之前版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Siemens COMOS V10.4.5 0 ~ V10.4.5.0.2 -
Siemens COMOS V10.6 0 ~ V10.6.1 -
Siemens Designcenter NX 0 ~ V2512.7000 -
Siemens Simcenter 3D 0 ~ V2512.7000 -
Siemens Simcenter Femap V2506 0 ~ V2506.0003 -
Siemens Simcenter Femap V2512 0 ~ V2512.0002 -
Siemens Simcenter Nastran 0 ~ V2606 -
Siemens Simcenter STAR-CCM+ 0 ~ V2606 -
Siemens Solid Edge SE2025 0 ~ V225.0 Update 13 -
Siemens Solid Edge SE2026 0 ~ V226.0 Update 04 -
Siemens Teamcenter Visualization V2412 0 ~ V2412.0012 -
Siemens Teamcenter Visualization V2506 0 ~ V2506.0009 -
Siemens Teamcenter Visualization V2512 0 ~ V2512.2605 -
Siemens Tecnomatix Plant Simulation V2404 0 ~ V2404.0022 -
Siemens Tecnomatix Plant Simulation V2504 0 ~ V2504.0010 -
Siemens Tecnomatix Process Simulate 0 ~ V2606 -

II. Public POCs for CVE-2025-40945

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-40945

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-40945 (1)

Same Patch Batch · Siemens · 2026-07-14 · 3 CVEs total

CVE-2026-56451 10.0 CRITICAL Siemens Opcenter X 加密问题漏洞
CVE-2026-54429 7.4 HIGH Siemens simatic s7-plcsim advanced 资源管理错误漏洞

IV. Related Vulnerabilities

Same vendor: Siemens
Same weakness: CWE-426

V. Comments for CVE-2025-40945

No comments yet

Leave a comment