CVE-2025-40810

Published: Oct 14, 2025Modified: Oct 16, 2025

7.3

Vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.

Affected (22)

Products: Siemens: Solid Edge Se2024, Solid Edge Se2025

Siemens

2 products

Solid Edge Se2024

Solid Edge Se2025

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Siemens Solid Edge Se2024	All versions
Siemens Solid Edge Se2024	Version 224.0
Siemens Solid Edge Se2024	Version 224.0 update_00010
Siemens Solid Edge Se2024	Version 224.0 update_00011
Siemens Solid Edge Se2024	Version 224.0 update_00012
Siemens Solid Edge Se2024	Version 224.0 update_00013
Siemens Solid Edge Se2024	Version 224.0 update_0001
Siemens Solid Edge Se2024	Version 224.0 update_0002
Siemens Solid Edge Se2024	Version 224.0 update_0003
Siemens Solid Edge Se2024	Version 224.0 update_0004
Siemens Solid Edge Se2024	Version 224.0 update_0005
Siemens Solid Edge Se2024	Version 224.0 update_0006
Siemens Solid Edge Se2024	Version 224.0 update_0007
Siemens Solid Edge Se2024	Version 224.0 update_0008
Siemens Solid Edge Se2024	Version 224.0 update_0009
Siemens Solid Edge Se2025	All versions
Siemens Solid Edge Se2025	Version 225.0
Siemens Solid Edge Se2025	Version 225.0 update_0001
Siemens Solid Edge Se2025	Version 225.0 update_0002
Siemens Solid Edge Se2025	Version 225.0 update_0003
Siemens Solid Edge Se2025	Version 225.0 update_0004
Siemens Solid Edge Se2025	Version 225.0 update_0005

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://cert-portal.siemens.com/productcert/html/ssa-541582.html

Source: productcert@siemens.com

Vendor Advisory

Timeline

No history available yet.