A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks.
This could allow a privileged local attacker to restore backups that are outside the backup folder.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-327438.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Jul 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks. This could allow a privileged local attacker to restore backups that are outside the backup folder. | |
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
30 May 2025, 17:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:scalance_lpe9403_firmware:-:*:*:*:*:*:*:* |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-327438.html - Vendor Advisory | |
| First Time |
Siemens
Siemens scalance Lpe9403 Firmware Siemens scalance Lpe9403 |
|
| CWE | CWE-22 |
13 May 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 10:15
Updated : 2025-07-08 11:15
NVD link : CVE-2025-40573
Mitre link : CVE-2025-40573
JSON object : View
Products Affected
siemens
- scalance_lpe9403_firmware
- scalance_lpe9403
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')