High SSA-868571 1 CVE

SSA-868571: Missing Server Certificate Validation in IAM Client

Published Dec 9, 2025 · Updated Mar 10, 2026 · Revision 2

Vendor: Siemens Product: COMOS V10.6 Product: NX V2412 Product: NX V2506 Product: Simcenter 3D Product: Simcenter Femap Product: Solid Edge SE2025 Product: Solid Edge SE2026

Summary

Multiple Siemens products are affected by improper certificate validation in IAM Client. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

High 7.4

CVE-2025-40800

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V…

Siemens Simcenter Femap Solid Edge SE2025 Solid Edge SE2026 Browsers ICS / OT

Dec 9, 2025

Revision history

2026-03-10 #2
Added fix for COMOS V10.6
2025-12-09 #1
Publication Date

References

SSA-868571: Missing Server Certificate Validation in IAM Client - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-868571.html