CVE-2025-40810: High severity Siemens Solid Edge Se2024 vulnerability
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Solid Edge SE2024to a version that resolves this vulnerability.Fixed in V224.0 Update 14 - Upgrade
Upgrade
Solid Edge SE2025to a version that resolves this vulnerability.Fixed in V225.0 Update 6
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40810?
CVE-2025-40810 is considered a high severity vulnerability due to the potential for an out of bounds write that can lead to application crashes.
How do I fix CVE-2025-40810?
To fix CVE-2025-40810, update Solid Edge SE2024 to V224.0 Update 14 or later, and Solid Edge SE2025 to V225.0 Update 6 or later.
What types of attacks can exploit CVE-2025-40810?
CVE-2025-40810 can be exploited by attackers through specially crafted PRT files that trigger an out of bounds write.
What software versions are affected by CVE-2025-40810?
CVE-2025-40810 affects all versions of Solid Edge SE2024 prior to V224.0 Update 14 and all versions of Solid Edge SE2025 prior to V225.0 Update 6.
What are the symptoms of an attack exploiting CVE-2025-40810?
An attack exploiting CVE-2025-40810 may cause the Solid Edge application to crash when opening a malicious PRT file.