A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (All versions < V225.0 Update 10), Solid Edge SE2026 (All versions < V226.0 Update 1). The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
COMOS V10.6
Vendor
Siemens
Product
COMOS V10.6
Platforms
Unknown
Default status
unknown
COMOS V10.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.6.1
Unavailable
None listed
COMOS V10.6
Vendor
Siemens
Product
COMOS V10.6
Platforms
Unknown
Default status
unknown
COMOS V10.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.6.1
Unavailable
None listed
NX V2412
Vendor
Siemens
Product
NX V2412
Platforms
Unknown
Default status
unknown
NX V2412 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2412.8700
Unavailable
None listed
NX V2506
Vendor
Siemens
Product
NX V2506
Platforms
Unknown
Default status
unknown
NX V2506 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.6000
Unavailable
None listed
Simcenter 3D
Vendor
Siemens
Product
Simcenter 3D
Platforms
Unknown
Default status
unknown
Simcenter 3D · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.6000
Unavailable
None listed
Simcenter Femap
Vendor
Siemens
Product
Simcenter Femap
Platforms
Unknown
Default status
unknown
Simcenter Femap · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.0002
Unavailable
None listed
Solid Edge SE2025
Vendor
Siemens
Product
Solid Edge SE2025
Platforms
Unknown
Default status
unknown
Solid Edge SE2025 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V225.0 Update 10
Unavailable
None listed
Solid Edge SE2026
Vendor
Siemens
Product
Solid Edge SE2026
Platforms
Unknown
Default status
unknown
Solid Edge SE2026 · Scoped product and version facts