SSA-627195
Vulnerability from csaf_siemens - Published: 2025-06-12 00:00 - Updated: 2026-09-28 00:00Summary
SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process
Notes
Summary: Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
A zip path traversal vulnerability exists in the module installation process of Studio Pro. By crafting a malicious module and distributing it via (for example) the Mendix Marketplace, an attacker could write or modify arbitrary files in directories outside a developer’s project directory upon module installation.
6.1 (Medium)
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Mendix Studio Pro 10 < V10.24.24 for Windows
Siemens / Mendix Studio Pro 10
|
vers:intdot/<10.24.24 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 10 < V10.24.24 for Mac
Siemens / Mendix Studio Pro 10
|
vers:intdot/<10.24.24 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11 < V11.13.0 for Windows
Siemens / Mendix Studio Pro 11
|
vers:intdot/<11.13.0 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11 < V11.13.0 for Mac
Siemens / Mendix Studio Pro 11
|
vers:intdot/<11.13.0 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11.12 < V11.12.2 for Windows
Siemens / Mendix Studio Pro 11.12
|
vers:intdot/<11.12.2 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11.12 < V11.12.2 for Mac
Siemens / Mendix Studio Pro 11.12
|
vers:intdot/<11.12.2 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11.6 < V11.6.9 for Windows
Siemens / Mendix Studio Pro 11.6
|
vers:intdot/<11.6.9 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 11.6 < V11.6.9 for Mac
Siemens / Mendix Studio Pro 11.6
|
vers:intdot/<11.6.9 |
Mitigation
Vendor Fix
fix
|
|
|
Mendix Studio Pro 9 < V9.24.44 for Windows
Siemens / Mendix Studio Pro 9
|
vers:intdot/<9.24.44 |
Mitigation
Vendor Fix
fix
|
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer\u2019s project directory.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro\u0027s Module Installation Process - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-627195.html"
},
{
"category": "self",
"summary": "SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro\u0027s Module Installation Process - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-627195.json"
}
],
"title": "SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro\u0027s Module Installation Process",
"tracking": {
"current_release_date": "2026-09-28T00:00:00.000Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-627195",
"initial_release_date": "2025-06-12T00:00:00.000Z",
"revision_history": [
{
"date": "2025-06-12T00:00:00.000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-07-08T00:00:00.000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added fix for Mendix Studio Pro 11"
},
{
"date": "2026-09-28T00:00:00.000Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Removed unsupported versions; Adjusted fix versions"
}
],
"status": "interim",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c10.24.24",
"product": {
"name": "Mendix Studio Pro 10 \u003c V10.24.24 for Windows",
"product_id": "1"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c10.24.24",
"product": {
"name": "Mendix Studio Pro 10 \u003c V10.24.24 for Mac",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "Mendix Studio Pro 10"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.13.0",
"product": {
"name": "Mendix Studio Pro 11 \u003c V11.13.0 for Windows",
"product_id": "3"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.13.0",
"product": {
"name": "Mendix Studio Pro 11 \u003c V11.13.0 for Mac",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "Mendix Studio Pro 11"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.12.2",
"product": {
"name": "Mendix Studio Pro 11.12 \u003c V11.12.2 for Windows",
"product_id": "5"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.12.2",
"product": {
"name": "Mendix Studio Pro 11.12 \u003c V11.12.2 for Mac",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "Mendix Studio Pro 11.12"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.6.9",
"product": {
"name": "Mendix Studio Pro 11.6 \u003c V11.6.9 for Windows",
"product_id": "7"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c11.6.9",
"product": {
"name": "Mendix Studio Pro 11.6 \u003c V11.6.9 for Mac",
"product_id": "8"
}
}
],
"category": "product_name",
"name": "Mendix Studio Pro 11.6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c9.24.44",
"product": {
"name": "Mendix Studio Pro 9 \u003c V9.24.44 for Windows",
"product_id": "9"
}
}
],
"category": "product_name",
"name": "Mendix Studio Pro 9"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-40592",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "description",
"text": "A zip path traversal vulnerability exists in the module installation process of Studio Pro. By crafting a malicious module and distributing it via (for example) the Mendix Marketplace, an attacker could write or modify arbitrary files in directories outside a developer\u2019s project directory upon module installation.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not install untrusted/unverified modules in your Studio Pro projects",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9"
]
},
{
"category": "vendor_fix",
"details": "Update to V10.24.24 or later version",
"product_ids": [
"1",
"2"
],
"url": "https://docs.mendix.com/releasenotes/studio-pro/10/"
},
{
"category": "vendor_fix",
"details": "Update to V11.12.2 or later version",
"product_ids": [
"5",
"6"
],
"url": "https://docs.mendix.com/releasenotes/studio-pro/11.12/"
},
{
"category": "vendor_fix",
"details": "Update to V11.13.0 or later version",
"product_ids": [
"3",
"4"
],
"url": "https://docs.mendix.com/releasenotes/studio-pro/11/"
},
{
"category": "vendor_fix",
"details": "Update to V11.6.9 or later version",
"product_ids": [
"7",
"8"
],
"url": "https://docs.mendix.com/releasenotes/studio-pro/11.6/"
},
{
"category": "vendor_fix",
"details": "Update to V9.24.44 or later version",
"product_ids": [
"9"
],
"url": "https://docs.mendix.com/releasenotes/studio-pro/9/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9"
]
}
],
"title": "CVE-2025-40592"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…