Scalance Lpe9403 Firmware (Siemens) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-05-13. Vendor: Siemens.

CVEs of Scalance Lpe9403 Firmware

CVE-2025-40581 - CVSS 8.4 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40580 - CVSS 7.8 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based…
CVE-2025-40583 - CVSS 6.7 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40582 - CVSS 8.5 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).…
CVE-2025-40575 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40578 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming…
CVE-2025-40577 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40576 - CVSS 5.3 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming…
CVE-2025-40579 - CVSS 7.8 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based…
CVE-2025-40574 - CVSS 8.5 (high), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to…
CVE-2025-40573 - CVSS 6.7 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal…
CVE-2025-40572 - CVSS 6.8 (medium), 2025-05-13: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to…
CVE-2025-27398 - CVSS 2.7 (low), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special…
CVE-2025-27397 - CVSS 5.1 (medium), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled…
CVE-2025-27392 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27395 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the scope of files…
CVE-2025-27394 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27393 - CVSS 8.6 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when…
CVE-2025-27396 - CVSS 8.8 (high), 2025-03-11: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of…
CVE-2023-27408 - CVSS 3.3 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This…
CVE-2023-27407 - CVSS 9.9 (critical), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user…
CVE-2023-27410 - CVSS 2.7 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app`…
CVE-2023-27409 - CVSS 3.3 (low), 2023-05-09: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the…
CVE-2022-0847 - CVSS 7.8 (high), 2022-03-10: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe…
CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
CVE-2021-36221 - CVSS 5.9 (medium), 2021-08-08: Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVE-2021-3449 - CVSS 5.9 (medium), 2021-03-25: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits…