A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession.
An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short time frame, which leads to a crash of the dcpd process.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-327438.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
04 Jun 2025, 16:33
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens
Siemens scalance Lpe9403 Firmware Siemens scalance Lpe9403 |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-327438.html - Vendor Advisory | |
| CPE | cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:scalance_lpe9403_firmware:-:*:*:*:*:*:*:* |
13 May 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 10:15
Updated : 2025-06-04 16:33
NVD link : CVE-2025-40578
Mitre link : CVE-2025-40578
JSON object : View
Products Affected
siemens
- scalance_lpe9403_firmware
- scalance_lpe9403
CWE
CWE-125
Out-of-bounds Read