CVE-2025-40740
BaseFortify
Publication date: 2025-07-08
Last updated on: 2025-08-21
Assigner: Siemens AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | solid_edge | to se2025 (inc) |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Solid Edge SE2025 versions prior to V225.0 Update 5. It involves an out of bounds read past the end of an allocated structure when parsing specially crafted PAR files. This flaw could allow an attacker to execute code within the context of the current process.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability could execute arbitrary code with the privileges of the affected application process. This could lead to unauthorized actions such as data manipulation, system compromise, or further attacks within the environment where Solid Edge SE2025 is used.