CVE-2025-40827
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-11

Assigner: Siemens AG

Description
A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-11-11
Last Modified
2025-11-11
Generated
2026-07-06
AI Q&A
2025-11-11
EPSS Evaluated
2026-07-05
NVD
CVE-2025-40827

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
siemens solid_edge se2025
siemens software_center <3.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a DLL hijacking issue in Siemens Software Center (all versions before V3.5) and Solid Edge SE2025 (all versions before V225.0 Update 10). An attacker can place a specially crafted DLL file on the system, which the affected application may load, allowing the attacker to execute arbitrary code.

Impact Analysis

The vulnerability can allow an attacker to execute arbitrary code on your system with the privileges of the affected application. This can lead to unauthorized actions such as data theft, system compromise, or disruption of services.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40827. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart