Loading vulnerability…
Missing TLS Certificate Validation in Siemens SALT SDK
CVE-2025-40801 is an improper certificate validation vulnerability in the Siemens Advanced Licensing Toolkit (SALT SDK). The SDK does not validate server certificates when establishing TLS connections to the authorization server, allowing an attacker positioned to intercept those connections to impersonate the server and conduct a man-in-the-middle attack. Affected products include COMOS V10.6 before V10.6.1; all versions of JT Bi-Directional Translator for STEP; NX V2412 before V2412.8900 and NX V2506 before V2506.6000 when using Cloud Entitlement; Simcenter 3D before V2506.6000 and Simcenter Femap before V2506.0002 when using Cloud Entitlement; Simcenter Studio and Simcenter System Architect before V2506.0001; and Tecnomatix Plant Simulation before V2504.0007.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits interception and modification of communications between an affected product and its authorization server. Potential confidentiality, integrity, and availability impacts are rated high. The vulnerability has a CVSS v3.1 base score of 8.1 with vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
If you can’t patch tonight, do this now.
Protect network access to affected systems with appropriate access-control mechanisms and configure the operating environment according to Siemens Industrial Security operational guidelines and product security recommendations. Minimize network exposure, isolate control networks, and use secure remote-access methods where applicable. These are general protections rather than a vulnerability-specific workaround; no product-specific workaround is provided for JT Bi-Directional Translator for STEP.
Patch, then assume compromise.
Upgrade to the applicable fixed release or later: COMOS V10.6.1; NX V2412.8900 for the V2412 branch; NX V2506.6000 for the V2506 branch; Simcenter 3D V2506.6000; Simcenter Femap V2506.0002; Simcenter Studio V2506.0001; Simcenter System Architect V2506.0001; or Tecnomatix Plant Simulation V2504.0007. No fix is currently planned for JT Bi-Directional Translator for STEP.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.