CNNVD-202511-990 Information

CNNVD ID

CNNVD-202511-990

CVE-2025-40827

  • CNNVD Published: 2025-11-11

Description (Chinese)

Siemens Software Center和Siemens Solid Edge SE2025都是德国西门子(Siemens)公司的产品。Siemens Software Center是一款产品。提供了一个简单、统一的工具,使客户能够管理软件交付和实施。Siemens Solid Edge SE2025是一款开发软件。 Siemens Software Center和Siemens Solid Edge SE2025存在代码问题漏洞,该漏洞源于容易受到DLL劫持攻击,可能导致执行任意代码。以下版本受到影响:Siemens Software Center V3.5之前版本和Siemens Solid Edge SE2025 V225.0 Update 10之前版本。

Description (English)

Siemens Software Center and Siemens Solid Edge SE2025 are products of Siemens, Germany. Siemens Software Center is a product. A simple, unified tool was provided to enable clients to manage software delivery and implementation. Siemens Solid Edge SE2025 is a development software. Siemens Software Center and Siemens Solid Edge SE2025 have a code loophole, which stems from their vulnerability to DLL hijacking attacks and could lead to the enforcement of arbitrary codes. The following versions were affected: pre-Siemens Software Center V3.5 and pre-Siemens Solid Edge SE2025 V225.0 Update 10.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

西门子

Published

2025-11-11

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-365596.html https://access.redhat.com/security/cve/cve-2025-40827

Patch

https://cert-portal.siemens.com/productcert/html/ssa-365596.html

Share on: