Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-40745: A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All ve

19
Routine
LOW 3.7REMOTEUPGRADEUPGRADEUPGRADE

CVE-2025-40745 is a low-severity flaw (CVSS 3.7) affecting simcenter 3d, simcenter femap, simcenter star-ccm\+ viewer. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates

Why this priority

  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score3.7 (Low)
Attack vectorNetwork (remote)
Attack complexityHigh
Privileges neededNone
User interactionNone
EPSS exploit chance0.1% (top 97%)
CISA exploited listNo
WeaknessCWE-295
Published2026-04-14
Last modified2026-10-14
Publisher (CNA): Siemens AG · Vendor: siemens

Share: LinkedIn · X · Reddit

Last updated 2026-10-14 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

siemens simcenter 3d UPGRADE
Affected: < 2506.6000
Fixed in: 2506.6000
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy simcenter-3d || rpm -q simcenter-3d || simcenter-3d --version
2. UPGRADE to 2506.6000 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade simcenter-3d
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade simcenter-3d
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
siemens simcenter femap UPGRADE
Affected: < 2506.6000
Fixed in: 2506.6000
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy simcenter-femap || rpm -q simcenter-femap || simcenter-femap --version
2. UPGRADE to 2506.6000 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade simcenter-femap
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade simcenter-femap
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
siemens simcenter star-ccm\+ viewer UPGRADE
Affected: < 2602
Fixed in: 2602
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy simcenter-star-ccm+-viewer || rpm -q simcenter-star-ccm+-viewer || simcenter-star-ccm+-viewer --version
2. UPGRADE to 2602 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade simcenter-star-ccm+-viewer
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade simcenter-star-ccm+-viewer
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
siemens software center UPGRADE
Affected: < 3.5.8.2
Fixed in: 3.5.8.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy software-center || rpm -q software-center || software-center --version
2. UPGRADE to 3.5.8.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade software-center
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade software-center
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
siemens solid edge se2025 UPGRADE
Affected: < 225.0 · 225.0 · 225.0 update_0001 · 225.0 update_0002 · 225.0 update_0003 · 225.0 update_0004 · 225.0 update_0005 · 225.0 update_0006
Fixed in: 225.0
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy solid-edge-se2025 || rpm -q solid-edge-se2025 || solid-edge-se2025 --version
2. UPGRADE to 225.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade solid-edge-se2025
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade solid-edge-se2025
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
siemens solid edge se2026 UPGRADE
Affected: < 226.0 · 226.0 · 226.0 update_1 · 226.0 update_2 · 226.0 update_3
Fixed in: 226.0
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy solid-edge-se2026 || rpm -q solid-edge-se2026 || solid-edge-se2026 --version
2. UPGRADE to 226.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade solid-edge-se2026
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade solid-edge-se2026
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-40745?

simcenter 3d: upgrade to 2506.6000; simcenter femap: upgrade to 2506.6000; simcenter star-ccm\+ viewer: upgrade to 2602. Exact commands for each OS are on this page.

Is CVE-2025-40745 being exploited?

CVE-2025-40745 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-40745 affect?

CVE-2025-40745 affects simcenter 3d, simcenter femap, simcenter star-ccm\+ viewer. Severity is low (CVSS 3.7). A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (

How urgent is CVE-2025-40745?

Priority 19/100. Remotely exploitable, no login, no user action

Software pages

Siemens vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.