Which versions of Comos V10 4 5 are affected by CVE-2025-40945?

Siemens IAM Client SDK (embedded in Solid Edge, Teamcenter Visualization, Simcenter, Tecnomatix, COMOS, and Designcenter NX) contains a local privilege escalation flaw allowing authenticated users to…

How to fix or mitigate CVE-2025-40945?

Within 24 hours, inventory all Siemens product deployments using IAM Client SDK and restrict local administrative access to engineering workstations; review and disable untrusted search paths through Windows security policies (AppInit_DLLs, user-writable directory removal from PATH). Within 7 days, implement privilege access management (PAM) controls for engineering workstations requiring elevated tasks to route through hardened jump hosts; enable monitoring for privilege escalation and DLL injection anomalies; contact Siemens support for patch availability timeline. Within 30 days, develop and stage a patch deployment plan for immediate rollout when Siemens releases a fix; evaluate network segmentation to isolate affected systems and reduce lateral movement risk from compromised endpoints.

Comos V10 4 5 CVE-2025-40945

Q: What is the CVSS score of CVE-2025-40945?

CVE-2025-40945 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-210460 HIGH

Untrusted Search Path (CWE-426)

2026-07-14 siemens

GHSA-fh68-jj27-gphg

Privilege Escalation Comos V10 4 5 Comos V10 6 Designcenter Nx Simcenter 3D Simcenter Femap V2506 Simcenter Femap V2512 Simcenter Nastran Simcenter Star Ccm Solid Edge Se2025 Solid Edge Se2026 Teamcenter Visualization V2412 Teamcenter Visualization V2506 Teamcenter Visualization V2512 Tecnomatix Plant Simulation V2404 Tecnomatix Plant Simulation V2504 Tecnomatix Process Simulate

8.5

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

8.5 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.7 MEDIUM

Local-only attack requiring high-privilege write access to the IAM SDK search path; full C/I/A impact justified as attacker library executes in the application's security context.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jul 14, 2026 - 10:31 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 14, 2026 - 10:22 vuln.today

cvss_changed

Severity Changed

Jul 14, 2026 - 10:22 NVD

MEDIUM HIGH

CVSS changed

Jul 14, 2026 - 10:22 NVD

6.7 (MEDIUM) 8.5 (HIGH)

Analysis Generated

Jul 14, 2026 - 10:16 vuln.today

DescriptionCVE.org

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versions < V2512.7000), Simcenter 3D (All versions < V2512.7000), Simcenter Femap V2506 (All versions < V2506.0003), Simcenter Femap V2512 (All versions < V2512.0002), Simcenter Nastran (All versions < V2606), Simcenter STAR-CCM+ (All versions < V2606), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Teamcenter Visualization V2412 (All versions < V2412.0012), Teamcenter Visualization V2506 (All versions < V2506.0009), Teamcenter Visualization V2512 (All versions < V2512.2605), Tecnomatix Plant Simulation V2404 (All versions < V2404.0022), Tecnomatix Plant Simulation V2504 (All versions < V2504.0010), Tecnomatix Process Simulate (All versions < V2606). Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

AnalysisAI

Local privilege escalation in Siemens' IAM Client SDK, a shared authentication component bundled across a wide range of Siemens engineering and PLM products (Solid Edge, Teamcenter Visualization, Simcenter, Tecnomatix, COMOS, Designcenter NX), allows an authenticated local user to load attacker-controlled code through an untrusted search path (CWE-426) and gain elevated privileges. The flaw carries a CVSS 4.0 base score of 8.5 and requires only low local privileges with no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.