3.3

CVSS3.1

CVE-2025-40818 -

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impe…

📅 Published: Dec. 9, 2025, 10:44 a.m. 🔄 Last Modified: Dec. 10, 2025, 9:42 p.m.

5.3

CVSS4.0

CVE-2025-40807 -

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.

📅 Published: Dec. 9, 2025, 10:44 a.m. 🔄 Last Modified: Jan. 2, 2026, 9:13 p.m.

6.9

CVSS4.0

CVE-2025-40806 -

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack w…

📅 Published: Dec. 9, 2025, 10:44 a.m. 🔄 Last Modified: Jan. 2, 2026, 9:13 p.m.

9.2

CVSS4.0

CVE-2025-40801 -

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Enti…

📅 Published: Dec. 9, 2025, 10:44 a.m. 🔄 Last Modified: April 15, 2026, 12:35 a.m.

9.1

CVSS4.0

CVE-2025-40800 -

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < V2412.8700), NX V2506 (All versions < V2506.6000), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Solid Edge SE2025 (Al…

📅 Published: Dec. 9, 2025, 10:44 a.m. 🔄 Last Modified: April 15, 2026, 12:35 a.m.

7.5

CVSS4.0

CVE-2024-56840 -

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (A…