PT-2025-46538 · Siemens · Solid Edge Se2025

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-40744

Positive Technologies · (AI Summary)

CVSS v2.0

7.8

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 11

Description The application does not properly validate client certificates when connecting to the License Service endpoint. This could allow a remote attacker to perform man-in-the-middle attacks.

Recommendations Update to version V225.0 Update 11 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-14920

CVE-2025-40744

Affected Products

Solid Edge Se2025

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-40744 · Security Note
• https://bdu.fstec.ru/vul/2025-14920 · Security Note
• https://cybersecurity-help.cz/vulnerabilities/118369 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-522291.html · Note
• https://twitter.com/CVEnew/status/1988348965792727526 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-46538 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-317-14 · Note
• https://t.me/CVEtracker/37083 · Telegram Post