top of page
perceptive_background_267k.jpg

Siemens Advanced Licensing (SALT) Toolkit

Published:

11 December 2025 at 12:00:00

Alert date:

12 December 2025 at 02:01:39

Source:

cisa.gov

Click to open the original link from this advisory

CISA advisory about a critical vulnerability (CVE-2025-40801) in Siemens Advanced Licensing (SALT) Toolkit affecting multiple Siemens products. The vulnerability involves improper certificate validation that could allow unauthenticated remote attackers to perform man-in-the-middle attacks. CVSS v4 score of 9.2 indicates high severity. Affects products including COMOS, NX, Simcenter, and Tecnomatix Plant Simulation with varying availability of fixes.

Technical details

The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This improper certificate validation vulnerability (CWE-295) could allow an attacker to perform man-in-the-middle attacks. The vulnerability is exploitable remotely with low attack complexity and could allow an unauthenticated remote attacker to perform man-in-the-middle attacks. CVSS v3.1 base score of 8.1 and CVSS v4 base score of 9.2.

Mitigation steps:

Update affected products to latest versions: NX V2412 to V2412.8900 or later, NX V2506 to V2506.6000 or later, Tecnomatix Plant Simulation to V2504.0007 or later, Simcenter Femap to V2506.0002 or later, Simcenter 3D to V2506.6000 or later. Minimize network exposure for control system devices, ensure they are not accessible from internet, locate control system networks behind firewalls, use VPNs for remote access, implement defense-in-depth strategies, follow Siemens operational guidelines for industrial security. Currently no fixes available for COMOS V10.6, Simcenter Studio, Simcenter System Architect, and no fix planned for JT Bi-Directional Translator for STEP.

Affected products:

COMOS V10.6: All versions
JT Bi-Directional Translator for STEP: All versions
NX V2412: Versions prior to 2412.8900
NX V2506: Versions prior to 2506.6000
Simcenter 3D: Versions prior to 2506.6000
Simcenter Femap: Versions prior to 2506.0002
Simcenter Studio: All versions
Simcenter System Architect: All versions
Tecnomatix Plant Simulation: Versions prior to 2504.0007

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page