ICSA-25-135-18

Siemens SCALANCE LPE9403

Advisory ansehen veröffentlicht 2025-05-13

SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

beschreibt (12)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-40583US	—OT erhöht	0.11% (1st)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do transmi…
CVE-2025-40582US	—	0.19% (8th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do not pro…
CVE-2025-40581US	—OT erhöht	0.16% (5th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices are vulner…
CVE-2025-40580US	high7.8	0.17% (6th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This coul…
CVE-2025-40579US	high7.8	0.17% (6th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This coul…
CVE-2025-40578US	—	0.28% (20th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in…
CVE-2025-40577US	—	0.28% (20th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An una…
CVE-2025-40576US	—	0.28% (20th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An una…
CVE-2025-40575US	medium5.3	0.48% (41st)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An una…
CVE-2025-40574US	—	0.14% (4th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.…
CVE-2025-40573US	—	0.18% (7th)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks. This could allow…
CVE-2025-40572US	—	0.14% (3rd)	—	2025-05-13
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources.…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403 - CSAF Versionself
SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403 - HTML Versionself
ICS Advisory ICSA-25-135-18 JSONself
ICS Advisory ICSA-25-135-18 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (24)

MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Disable the Profinet Discovery and Configuration Protocol (DCP) service
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Only use trusted SINEMA Remote Connect Servers
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
MitigationSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Restrict access to authorized and trusted personal only
Kein Fix geplantSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Currently no fix is planned
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/
BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V4.0 HF0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989944/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan