Loading vulnerability…
Local Privilege Escalation in Siemens Products via IAM Client SDK
CVE-2025-40945 is an untrusted search path vulnerability in the IAM Client SDK used by multiple Siemens engineering and industrial software products, including COMOS, Designcenter NX, Simcenter, Solid Edge, Teamcenter Visualization, and Tecnomatix. An authenticated attacker with local access may exploit the search path handling to escalate privileges. Exploitation does not require user interaction. The specific vulnerable function and search path are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation may allow local privilege escalation, with high impact on the confidentiality, integrity, and availability of the affected system. The vulnerability is not remotely exploitable.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is identified. Restrict local access to affected systems to trusted, authorized users. Apply Siemens' general security recommendations, including appropriate network access controls, Industrial Security operational guidelines, and product-specific hardening guidance. Network controls alone do not resolve this local search path vulnerability.
Patch, then assume compromise.
Upgrade affected products to the following fixed versions or later within the applicable release branch: COMOS V10.4.5 to V10.4.5.0.2; COMOS V10.6 to V10.6.1; Designcenter NX and Simcenter 3D to V2512.7000; Simcenter Femap V2506 to V2506.0003 and V2512 to V2512.0002; Simcenter Nastran and Simcenter STAR-CCM+ to V2606; Solid Edge SE2025 to V225.0 Update 13 and SE2026 to V226.0 Update 04; Teamcenter Visualization V2412 to V2412.0012, V2506 to V2506.0009, and V2512 to V2512.2605; Tecnomatix Plant Simulation V2404 to V2404.0022 and V2504 to V2504.0010; and Tecnomatix Process Simulate to V2606. Contact Siemens customer support for the COMOS V10.4.5.0.2 patch and update information. Obtain other updates through Siemens support and confirm availability, as some fixes may still be in preparation.
No public exploits tracked yet. Mallory keeps watching.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.