Remote Code Execution Vulnerability in SCALANCE LPE9403 by Siemens

CVE-2025-40577

What is CVE-2025-40577?

A vulnerability has been discovered in SCALANCE LPE9403 devices, which fail to properly validate incoming Profinet packets. This lack of validation allows an unauthenticated remote attacker to exploit the flaw by transmitting specially crafted malicious packets. Such exploitation can lead to a disruption in service by crashing the dcpd process, posing significant risks to the integrity and availability of the affected systems. Organizations using these devices should implement recommended security measures promptly to mitigate potential exploitations.

References