A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd
process.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-327438.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Jul 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process. | |
| CWE |
30 May 2025, 17:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:scalance_lpe9403_firmware:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | () https://cert-portal.siemens.com/productcert/html/ssa-327438.html - Vendor Advisory | |
| First Time |
Siemens
Siemens scalance Lpe9403 Firmware Siemens scalance Lpe9403 |
|
| CWE | NVD-CWE-noinfo |
13 May 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 10:15
Updated : 2025-07-08 11:15
NVD link : CVE-2025-40575
Mitre link : CVE-2025-40575
JSON object : View
Products Affected
siemens
- scalance_lpe9403_firmware
- scalance_lpe9403
CWE