SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40583US | —OT elevated | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do transmi… | ||||
| CVE-2025-40582US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do not pro… | ||||
| CVE-2025-40581US | —OT elevated | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices are vulner… | ||||
| CVE-2025-40580US | high7.8 | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow.
This coul… | ||||
| CVE-2025-40579US | high7.8 | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow.
This coul… | ||||
| CVE-2025-40578US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in… | ||||
| CVE-2025-40577US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An una… | ||||
| CVE-2025-40576US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An una… | ||||
| CVE-2025-40575US | medium5.3 | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An una… | ||||
| CVE-2025-40574US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.… | ||||
| CVE-2025-40573US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks.
This could allow… | ||||
| CVE-2025-40572US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.… | ||||
references
External citations — patches, advisories, analysis.
remediations (24)
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Only use trusted SINEMA Remote Connect Servers
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
- No fix plannedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Currently no fix is planned
- FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
- FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
- FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
- FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/ - FixedSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan