CVE-2025-40741 Details
Description
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files. This could allow an attacker to execute code in the context of the current process.
A stack-based buffer overflow vulnerability has been identified in Siemens Solid Edge SE2025, all versions prior to V225.0 Update 5. This vulnerability arises when the application parses specially crafted CFG files, potentially allowing an attacker to execute code within the context of the current process.
Users are advised to update Solid Edge SE2025 to V225.0 Update 5 or later. For further recommendations, consult the Siemens ProductCERT advisory SSA-091753.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 8, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-091753.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| siemens solid edge | <= se2025 se2025 - se2025 update_1 se2025 update_2 se2025 update_3 se2025 update_4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 21, 2025 | Initial Analysis | [email protected] |
| Jul 8, 2025 | New CVE Received | [email protected] |