CVE-2025-40811: High severity Siemens Solid Edge Se2024 vulnerability
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Solid Edge SE2024to a version that resolves this vulnerability.Fixed in V224.0 Update 14 - Upgrade
Upgrade
Solid Edge SE2025to a version that resolves this vulnerability.Fixed in V225.0 Update 6
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40811?
CVE-2025-40811 is considered a moderate severity vulnerability due to the risk of application crashes.
How do I fix CVE-2025-40811?
To mitigate CVE-2025-40811, update to Solid Edge SE2024 V224.0 Update 14 or Solid Edge SE2025 V225.0 Update 6 or later.
What types of files are involved in CVE-2025-40811?
CVE-2025-40811 involves specially crafted PRT files that can trigger the out of bounds read vulnerability.
What versions of Solid Edge are affected by CVE-2025-40811?
CVE-2025-40811 affects all versions of Solid Edge SE2024 prior to V224.0 Update 14 and SE2025 prior to V225.0 Update 6.
Can CVE-2025-40811 lead to data loss?
While CVE-2025-40811 primarily causes crashes, there is a potential risk of data loss depending on the application state when the crash occurs.