Description
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2025 | < V225.0 Update 11 | V225.0 Update 11 |
Advisories 3
- NCSC-2025-0357 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 11, 2025
- ICSA-25-317-14 Siemens Solid Edge CISA ICS & IT advisories · Nov 11, 2025
- SSA-522291 SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge Siemens ProductCERT · Nov 11, 2025