CVE-2025-40800 Security feature bypass in COMOS V10.6
Missing TLS certificate validation in the IAM client allows attackers to perform man-in-the-middle attacks on Siemens engineering software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-40800?
CVE-2025-40800 is a critical vulnerability in Siemens COMOS V10.6, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Weakness: CWE-295
Which versions are affected by CVE-2025-40800?
How do I fix CVE-2025-40800?
No fix has been published for CVE-2025-40800 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-40800 being exploited?
There is no known exploitation of CVE-2025-40800 in the wild and no public exploit code.
Sources
Also known as GHSA-xg9v-jc69-p54f.