Siemens Solid Edge Improper Certificate Validation Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in Siemens Solid Edge SE2025, all versions prior to V225.0 Update 11, due to improper validation of client certificates when connecting to the License Service endpoint. This flaw could enable an unauthenticated remote attacker to conduct man-in-the-middle attacks.

Impact

Exploitation of this vulnerability could lead to man-in-the-middle attacks, allowing an attacker to intercept and potentially alter communications between the client and the License Service endpoint.

Remediation

Users are advised to update Solid Edge SE2025 to V225.0 Update 11 or a later version. Additional information can be found on the Siemens Support website.