Man-in-the-Middle Attack Vulnerability in Siemens Solid Edge SE2025

CVE-2025-40744

What is CVE-2025-40744?

A vulnerability exists in Solid Edge SE2025 where client certificates are not properly validated for connections to the License Service endpoint. This oversight can be exploited by an unauthenticated remote attacker, potentially leading to man-in-the-middle attacks that could jeopardize sensitive data and communications.

References