Low · published April 14, 2026
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
| Product | Versions | Fixed in |
|---|---|---|
| siemens/simcenter_3d | < 2506.6000 | 2506.6000 |
| siemens/simcenter_femap | < 2506.6000 | 2506.6000 |
| siemens/simcenter_star-ccm\+_viewer | < 2602 | 2602 |
| siemens/software_center | < 3.5.8.2 | 3.5.8.2 |
| siemens/solid_edge_se2025 | < 225.0 | 225.0 |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2025 | all versions | — |
| siemens/solid_edge_se2026 | < 226.0 | 226.0 |
| siemens/solid_edge_se2026 | all versions | — |
| siemens/solid_edge_se2026 | all versions | — |
| siemens/solid_edge_se2026 | all versions | — |
| siemens/solid_edge_se2026 | all versions | — |
| siemens/tecnomatix_plant_simulation | < 2504.0008 | 2504.0008 |