Remote Code Execution Vulnerability in SCALANCE LPE9403 by Siemens
CVE-2025-40577

5.3MEDIUM

Key Information:

Vendor

Siemens
Status
Scalance Lpe9403
Vendor
CVE Published:
13 May 2025

What is CVE-2025-40577?

A vulnerability has been discovered in SCALANCE LPE9403 devices, which fail to properly validate incoming Profinet packets. This lack of validation allows an unauthenticated remote attacker to exploit the flaw by transmitting specially crafted malicious packets. Such exploitation can lead to a disruption in service by crashing the dcpd process, posing significant risks to the integrity and availability of the affected systems. Organizations using these devices should implement recommended security measures promptly to mitigate potential exploitations.

Affected Version(s)

SCALANCE LPE9403 0

References

https://cert-portal.siemens.com/productcert/html/ssa-3274...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.