siemens scalance lpe9403 firmware

Name: siemens scalance lpe9403 firmware
Brand: siemens

productUS

cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical4high4medium1low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-4034US	high7.8OT critical	94.9% (100th)	KEV	2.0	2022-01-28	< 2.0
CVE-2022-0847US	high7.8OT critical	92.8% (100th)	KEV	2.0	2022-03-10	< 2.0
CVE-2021-3449US	medium5.9	63.5% (99th)	Exploit	no fix	2021-03-25	—
CVE-2021-36221US	medium5.9	3.11% (88th)	—	2.0	2021-08-08	< 2.0
CVE-2023-27407US	critical9.9	1.30% (70th)	—	2.1	2023-05-09	< 2.1
CVE-2025-27394US	—	0.73% (54th)	—	4.0	2025-03-11	< 4.0
CVE-2025-27393US	—	0.73% (54th)	—	4.0	2025-03-11	< 4.0
CVE-2025-27392US	—	0.73% (54th)	—	4.0	2025-03-11	< 4.0
CVE-2025-27395US	medium6.5	0.66% (51st)	—	4.0	2025-03-11	< 4.0
CVE-2023-27410US	—	0.56% (46th)	—	2.1	2023-05-09	< 2.1
CVE-2025-40575US	medium5.3	0.48% (41st)	—	no fix	2025-05-13	—
CVE-2025-27396US	—	0.44% (38th)	—	4.0	2025-03-11	< 4.0
CVE-2025-27397US	—	0.41% (35th)	—	4.0	2025-03-11	< 4.0
CVE-2025-27398US	—	0.34% (27th)	—	4.0	2025-03-11	< 4.0
CVE-2025-40578US	—	0.28% (20th)	—	no fix	2025-05-13	—
CVE-2025-40577US	—	0.28% (20th)	—	no fix	2025-05-13	—
CVE-2025-40576US	—	0.28% (20th)	—	no fix	2025-05-13	—
CVE-2025-40582US	—	0.19% (8th)	—	no fix	2025-05-13	—
CVE-2025-40573US	—	0.18% (7th)	—	no fix	2025-05-13	—
CVE-2023-27409US	low3.3	0.17% (7th)	—	2.1	2023-05-09	< 2.1
CVE-2023-27408US	—	0.17% (6th)	—	2.1	2023-05-09	< 2.1
CVE-2025-40580US	high7.8	0.17% (6th)	—	no fix	2025-05-13	—
CVE-2025-40579US	high7.8	0.17% (6th)	—	no fix	2025-05-13	—
CVE-2025-40581US	—OT elevated	0.16% (5th)	—	no fix	2025-05-13	—
CVE-2025-40574US	—	0.14% (4th)	—	no fix	2025-05-13	—
CVE-2025-40572US	—	0.14% (3rd)	—	no fix	2025-05-13	—
CVE-2025-40583US	—OT elevated	0.11% (1st)	—	no fix	2025-05-13	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan