CVE-2025-40945: Siemens Multiple Products privilege escalation in IAM Client SDK

CVE-2025-40945 · Severity: medium · CVSS 6.7 · Published 2026-07-14

A vulnerability exists in the Identity and Access Management (IAM) Client SDK used across several Siemens industrial design, simulation, and lifecycle management products. These products are used by engineers and manufacturers to design complex systems, simulate fluid dynamics, and manage plant operations. An attacker who already has local access to a system could exploit this flaw to gain higher-level administrative privileges, potentially allowing them to take full control of the workstation or modify sensitive engineering data.

Quick answers

Is CVE-2025-40945 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-40945 being exploited in the wild.
How severe is CVE-2025-40945?
Medium severity, with a CVSS score of 6.7, published 14 July 2026.
Which products and versions are affected?
Siemens COMOS V10.4.5 < V10.4.5.0.2; Siemens COMOS V10.6 < V10.6.1; Siemens Designcenter NX < V2512.7000; Siemens Simcenter 3D < V2512.7000; and 12 more.
Is there a fix for CVE-2025-40945?
A patch was published on 2026-07-14. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-40945 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2025-40945?
Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An untrusted search path vulnerability (CWE-426) exists in the IAM Client SDK integrated into various Siemens products. The flaw stems from the application searching for required resources or libraries in directories that can be influenced by a local user. An authenticated attacker with local access can exploit this by placing a malicious file in the search path, leading to the execution of arbitrary code with elevated privileges. Siemens has released updates for most affected products, including COMOS, Solid Edge, and Teamcenter Visualization, to address the issue.

Affected products

  • Siemens COMOS V10.4.5 < V10.4.5.0.2
  • Siemens COMOS V10.6 < V10.6.1
  • Siemens Designcenter NX < V2512.7000
  • Siemens Simcenter 3D < V2512.7000
  • Siemens Simcenter Femap V2506 < V2506.0003
  • Siemens Simcenter Femap V2512 < V2512.0002
  • Siemens Simcenter Nastran < V2606
  • Siemens Simcenter STAR-CCM+ < V2606
  • Siemens Solid Edge SE2025 < V225.0 Update 13
  • Siemens Solid Edge SE2026 < V226.0 Update 04
  • Siemens Teamcenter Visualization V2412 < V2412.0012
  • Siemens Teamcenter Visualization V2506 < V2506.0009
  • Siemens Teamcenter Visualization V2512 < V2512.2605
  • Siemens Tecnomatix Plant Simulation V2404 < V2404.0022
  • Siemens Tecnomatix Plant Simulation V2504 < V2504.0010
  • Siemens Tecnomatix Process Simulate < V2606

Timeline

  • 2026-07-14: disclosed
  • 2026-07-14: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.