Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Siemens Software Center | < V3.5.8.2 | V3.5.8.2 |
| Siemens | Simcenter 3D | < V2506.6000 | V2506.6000 |
| Siemens | Simcenter Femap | < V2506.0002 | V2506.0002 |
| Siemens | Simcenter STAR-CCM+ | < V2602 | V2602 |
| Siemens | Solid Edge SE2025 | < V225.0 Update 13 | V225.0 Update 13 |
| Siemens | Solid Edge SE2026 | < V226.0 Update 04 | V226.0 Update 04 |
| Siemens | Tecnomatix Plant Simulation | < V2504.0008 | V2504.0008 |
Advisories 3
- ICSA-26-111-04 Siemens Analytics Toolkit CISA ICS & IT advisories · Apr 21, 2026
- NCSC-2026-0112 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 14, 2026
- SSA-981622 SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit Siemens ProductCERT · Apr 14, 2026