Dashboard / CVE-2025-40809

CVE-2025-40809

HIGH
MEDIUM Priority: 0.01 BB Relevance: 40/100
Published: 2025-10-14 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Passive
S: X
AT: None
VC: High
VI: High
VA: High

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.

Weakness Classification (1)

Affected Software (22)

VendorProductVersion
siemens solid_edge_se2024 -
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2024 224.0
siemens solid_edge_se2025 -
siemens solid_edge_se2025 225.0
siemens solid_edge_se2025 225.0
siemens solid_edge_se2025 225.0
siemens solid_edge_se2025 225.0
siemens solid_edge_se2025 225.0
siemens solid_edge_se2025 225.0

References & Advisories (1)

Bug Bounty Relevance

40 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.3 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.14%
Raw Score 0.001380
Percentile 3.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00138
2026-10-28
0.00138

Intelligence Sources

nvd ref →

External Links