CVE-2025-40809: High severity Siemens Solid Edge Se2024 vulnerability
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Solid Edge SE2024to a version that resolves this vulnerability.Fixed in V224.0 Update 14 - Upgrade
Upgrade
Solid Edge SE2025to a version that resolves this vulnerability.Fixed in V225.0 Update 6
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40809?
CVE-2025-40809 has been classified as a high severity vulnerability due to its potential to allow remote attackers to crash the application.
How do I fix CVE-2025-40809?
To mitigate CVE-2025-40809, users should update Siemens Solid Edge SE2024 to version V224.0 Update 14 or Siemens Solid Edge SE2025 to version V225.0 Update 6.
What kind of vulnerability is CVE-2025-40809?
CVE-2025-40809 is an out of bounds write vulnerability that occurs while parsing specially crafted PRT files.
Which versions of Solid Edge are affected by CVE-2025-40809?
All versions of Solid Edge SE2024 prior to V224.0 Update 14 and SE2025 prior to V225.0 Update 6 are affected by CVE-2025-40809.
What could an attacker achieve by exploiting CVE-2025-40809?
An attacker exploiting CVE-2025-40809 could potentially crash the affected applications.