{“lastseen”:””,”description”:”A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), NX V2412 (All versions \\u003c V2412.8700), NX V2506 (All versions \\u003c V2506.6000), Simcenter 3D (All versions \\u003c V2506.6000), Simcenter Femap (All versions \\u003c V2506.0002), Solid Edge SE2025 (All versions \\u003c V225.0 Update 10), Solid Edge SE2026 (All versions \\u003c V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.”,”published”:”2025-12-09T10:44:23.488Z”,”modified”:”2025-12-09T10:44:23.488Z”,”type”:”cve”,”title”:”CVE-2025-40800″,”source”:”siemens”,”references”:”https:\/\/cert-portal.siemens.com\/productcert\/html\/ssa-868571.html\\nhttps:\/\/cert-portal.siemens.com\/productcert\/html\/ssa-212953.html”,”id”:”CVE-2025-40800″,”bulletinFamily”:””,”cwe”:[“CWE-295″],”cvelist”:null,”sourceData”:”Siemens COMOS V10.6 0\\nSiemens COMOS V10.6 0\\nSiemens NX V2412 0\\nSiemens NX V2506 0\\nSiemens Simcenter 3D 0\\nSiemens Simcenter Femap 0\\nSiemens Solid Edge SE2025 0\\nSiemens Solid Edge SE2026 0″,”sourceHref”:””,”cvss”:{“score”:7.4,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”COMOS V10.6″,”version”:”0″,”vendor”:”Siemens”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), NX V2412 (All versions \\u003c V2412.8700), NX V2506 (All versions \\u003c…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,29,12,15,13,7,11,5],"class_list":["post-29571","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-74","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n