CVE-2025-40801 Weak cryptography in COMOS V10.6
Missing server certificate validation in SALT SDK allows man-in-the-middle attacks, exposing data and bypassing security controls in Siemens engineering tools.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-40801?
CVE-2025-40801 is a critical vulnerability in Siemens COMOS V10.6, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Weakness: CWE-295
Which versions are affected by CVE-2025-40801?
How do I fix CVE-2025-40801?
No fix has been published for CVE-2025-40801 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-40801 being exploited?
There is no known exploitation of CVE-2025-40801 in the wild and no public exploit code.
Sources
Also known as GHSA-3p2p-55rm-xcvw.