CVE-2025-40744

Publication date

2025-11-11 20:20:34

Family

siemens

State

PUBLISHED

Description

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.