Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simcenter_star-ccm+:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimcenter Star Ccm+ (67fd936c-98b9-535e-8ea4-b39df2a9136d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40745 vulnerable 2026-06-08 07:25:05.512948 Details available
LOW (3.7)
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Published: 2026-04-14T08:40:38.637Z
Updated: 2026-04-14T13:38:29.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43517 vulnerable 2026-06-08 05:49:33.437919 Details available
HIGH (7.8)
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:43:56.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34659 vulnerable 2026-06-08 05:46:02.544741 Details available
MEDIUM (5.3)
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information.
Published: 2022-08-10T11:17:56.000Z
Updated: 2026-07-14T09:19:01.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.