Scalance Lpe9403 (Siemens) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-01-27. Vendor: Siemens.

CVEs of Scalance Lpe9403

CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2025-40580 - CVSS 7.8 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based…
CVE-2025-40583 - CVSS 6.7 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40582 - CVSS 8.5 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40581 - CVSS 8.4 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40577 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40576 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40579 - CVSS 7.8 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based…
CVE-2025-40575 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40578 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming…
CVE-2025-40574 - CVSS 8.5 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to…
CVE-2025-40573 - CVSS 6.7 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal…
CVE-2025-40572 - CVSS 6.8 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to…
CVE-2025-27397 - CVSS 5.1 (medium), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled…
CVE-2025-27398 - CVSS 2.7 (low), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special…
CVE-2025-27394 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27393 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27396 - CVSS 8.8 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of…
CVE-2025-27392 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27395 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the scope of files…
CVE-2023-27407 - CVSS 9.9 (critical), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user…
CVE-2023-27410 - CVSS 2.7 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app`…
CVE-2023-27409 - CVSS 3.3 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the…
CVE-2023-27408 - CVSS 3.3 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This…
CVE-2022-0778 - CVSS 7.5 (high), 2022-03-15: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…