CVE-2025-40812: High severity Siemens Solid Edge Se2024 vulnerability
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Solid Edge SE2024to a version that resolves this vulnerability.Fixed in V224.0 Update 14 - Upgrade
Upgrade
Solid Edge SE2025to a version that resolves this vulnerability.Fixed in V225.0 Update 6
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40812?
CVE-2025-40812 is classified as a high severity vulnerability due to its ability to allow an attacker to potentially crash the application.
How do I fix CVE-2025-40812?
To mitigate CVE-2025-40812, upgrade to Solid Edge SE2024 version V224.0 Update 14 or later, and Solid Edge SE2025 version V225.0 Update 6 or later.
What versions of Solid Edge are affected by CVE-2025-40812?
CVE-2025-40812 affects all versions of Solid Edge SE2024 prior to V224.0 Update 14 and SE2025 prior to V225.0 Update 6.
What type of vulnerability is CVE-2025-40812?
CVE-2025-40812 is an out of bounds read vulnerability specifically related to the parsing of specially crafted PRT files.
Can CVE-2025-40812 lead to exploitation by attackers?
Yes, CVE-2025-40812 can be exploited by attackers to crash the Solid Edge application, potentially leading to further system compromise.