Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:scalance_lpe9403_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductScalance Lpe9403 Firmware (7316a61b-9a49-5900-862a-6a874487b094)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40583 vulnerable 2026-06-08 07:25:05.084398 Details available
MEDIUM (4.4)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information.
Published: 2025-05-13T09:39:11.578Z
Updated: 2025-05-13T13:09:48.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40582 vulnerable 2026-06-08 07:25:05.084090 Details available
HIGH (7.8)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the device.
Published: 2025-05-13T09:39:10.166Z
Updated: 2025-05-13T13:12:51.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40581 vulnerable 2026-06-08 07:25:05.083675 Details available
HIGH (7.1)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters.
Published: 2025-05-13T09:39:08.719Z
Updated: 2025-05-13T13:14:02.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40580 vulnerable 2026-06-08 07:25:05.083135 Details available
MEDIUM (6.7)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
Published: 2025-05-13T09:39:07.185Z
Updated: 2025-07-08T10:34:46.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40579 vulnerable 2026-06-08 07:25:05.082643 Details available
MEDIUM (6.7)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
Published: 2025-05-13T09:39:05.634Z
Updated: 2025-07-08T10:34:45.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40578 vulnerable 2026-06-08 07:25:05.082200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40577 vulnerable 2026-06-08 07:25:05.081674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40576 vulnerable 2026-06-08 07:25:05.081281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40575 vulnerable 2026-06-08 07:25:05.080864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40574 vulnerable 2026-06-08 07:25:05.080347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40573 vulnerable 2026-06-08 07:25:05.079791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40572 vulnerable 2026-06-08 07:25:05.077991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.