SSA-288252

Siemens Security Advisory by Siemens ProductCERT

SSA-288252: Unquoted Search Path Vulnerability in IAM Client

Publication Date:	2026-07-14
Last Update:	2026-07-14
Current Version:	V1.0
CVSS v3.1 Base Score:	6.7
CVSS v4.0 Base Score:	8.5

SUMMARY

Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

KNOWN AFFECTED PRODUCTS

Un-/Collapse All

Affected Product and Versions	Remediation
COMOS V10.4.5 All versions < V10.4.5.0.2 affected by CVE-2025-40945	Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
COMOS V10.6 All versions < V10.6.1 affected by CVE-2025-40945	Update to V10.6.1 or later version https://support.sw.siemens.com/product/222981661/
Designcenter NX All versions < V2512.7000 affected by CVE-2025-40945	Update to V2512.7000 or later version https://support.sw.siemens.com/product/209349590/
Simcenter 3D All versions < V2512.7000 affected by CVE-2025-40945	Update to V2512.7000 or later version https://support.sw.siemens.com/product/289054037/
Simcenter Femap V2506 All versions < V2506.0003 affected by CVE-2025-40945	Update to V2506.0003 or later version https://support.sw.siemens.com/product/275652363/
Simcenter Femap V2512 All versions < V2512.0002 affected by CVE-2025-40945	Update to V2512.0002 or later version https://support.sw.siemens.com/product/275652363/
Simcenter Nastran All versions < V2606 affected by CVE-2025-40945	Update to V2606 or later version https://support.sw.siemens.com/product/289054037/
Simcenter STAR-CCM+ All versions < V2606 affected by CVE-2025-40945	Update to V2606 or later version https://support.sw.siemens.com/product/226870983/
Solid Edge SE2025 All versions < V225.0 Update 13 affected by CVE-2025-40945	Update to V225.0 Update 13 or later version https://support.sw.siemens.com/product/246738425/
Solid Edge SE2026 All versions < V226.0 Update 04 affected by CVE-2025-40945	Update to V226.0 Update 04 or later version https://support.sw.siemens.com/product/246738425/
Teamcenter Visualization V2412 All versions < V2412.0012 affected by CVE-2025-40945	Update to V2412.0012 or later version https://support.sw.siemens.com/product/229029598/
Teamcenter Visualization V2506 All versions < V2506.0009 affected by CVE-2025-40945	Update to V2506.0009 or later version https://support.sw.siemens.com/product/229029598/
Teamcenter Visualization V2512 All versions < V2512.2605 affected by CVE-2025-40945	Update to V2512.2605 or later version https://support.sw.siemens.com/product/229029598/
Tecnomatix Plant Simulation V2404 All versions < V2404.0022 affected by CVE-2025-40945	Update to V2404.0022 or later version https://support.sw.siemens.com/product/297028302/
Tecnomatix Plant Simulation V2504 All versions < V2504.0010 affected by CVE-2025-40945	Update to V2504.0010 or later version https://support.sw.siemens.com/product/297028302/
Tecnomatix Process Simulate All versions < V2606 affected by CVE-2025-40945	Update to V2606 or later version https://support.sw.siemens.com/product/288782031/

MITIGATIONS

Product-specific remediations or mitigations can be found in the section Known Affected Products.
Please follow the General Security Recommendations.

GENERAL SECURITY RECOMMENDATIONS

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION

COMOS is a unified data platform for collaborative plant design, operation and management that supports collecting, processing, saving, and distributing of information throughout the entire plant lifecycle.

Designcenter NX software is an integrated toolset that helps to develop design, simulation, and manufacturing solutions by supporting various aspects of product development allowing the designer to optimize shape to achieve a multidisciplinary design.

Simcenter Femap is an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems.

Simcenter Nastran is a finite element method (FEM) solver for computational performance, accuracy and reliability. It is a solution for linear and nonlinear structural analysis, structural dynamics, acoustics, rotor dynamics, aeroelasticity and optimization.

Simcenter STAR-CCM+ is a multiphysics computational fluid dynamics (CFD) software for the simulation of products operating under real-world conditions.

Solid Edge is a portfolio of software tools that addresses various product development processes: 3D design, simulation, manufacturing and design management.

Teamcenter Visualization software enables enterprises to enhance their product lifecycle management (PLM) environment with a comprehensive family of visualization solutions. The software enables enterprise users to access documents, 2D drawings and 3D models in a single environment.

Tecnomatix Plant Simulation allows you to model, simulate, explore and optimize logistics systems and their processes. These models enable analysis of material flow, resource utilization and logistics for all levels of manufacturing planning from global production facilities to local plants and specific lines, well in advance of production execution.

VULNERABILITY DESCRIPTION

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Vulnerability CVE-2025-40945

Untrusted search path in IAM Client SDK may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS v3.1 Base Score	6.7
CVSS v3.1 Vector	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0 Base Score	8.5
CVSS v4.0 Vector	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE	CWE-426: Untrusted Search Path

ADDITIONAL INFORMATION

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

HISTORY DATA

V1.0 (2026-07-14):

Publication Date

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.