CVE-2025-40573

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attacks. This could allow a privileged local attacker to restore backups that are outside the backup folder.

Score

CVSS 4.0 6.7 Medium

Status

Modified - productcert@siemens.com

Published

2025-05-13

Last modified

2025-07-08

Weaknesses

CWE-22, CWE-35

Affected products

• Scalance Lpe9403 (Siemens)
• Scalance Lpe9403 Firmware (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-327438.html