CVE-2025-40741
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-07-08
Last updated on: 2025-08-21
Assigner: Siemens AG
Description
Description
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted CFG files.
This could allow an attacker to execute code in the context of the current process.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | solid_edge | to se2025 (inc) |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
| siemens | solid_edge | se2025 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stack-based buffer overflow in Solid Edge SE2025 versions before V225.0 Update 5. It occurs when the software parses specially crafted CFG files, which can lead to an attacker executing arbitrary code within the context of the affected process.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability could execute arbitrary code on your system with the privileges of the Solid Edge process. This could lead to unauthorized actions such as data manipulation, system compromise, or further attacks within your environment.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70