Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisorySeverity 7.8 high

Siemens SCALANCE LPE9403

ICSA-25-135-18 · CISA · May 13, 2025

Summary

SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

From CISA, quoted as published. Check the source before acting.

What to do

Restrict access to authorized and trusted personal only Update to V4.0 HF0 or later version Disable the Profinet Discovery and Configuration Protocol (DCP) service Currently no fix is planned Update to V2.1 HF0 or later version Available on Industrial Edge Hub for ARM 64 and X86 Only use trusted SINEMA Remote Connect Servers

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2025-405725.5 mediumNo0.1%Incorrect Permission Assignment for Critical Resource (CWE-732)
CVE-2025-405734.4 mediumNo0.2%Path Traversal: '.../...//' (CWE-35)
CVE-2025-405747.8 highNo0.1%Incorrect Permission Assignment for Critical Resource (CWE-732)
CVE-2025-405754.3 mediumNo0.5%Use of Uninitialized Variable (CWE-457)
CVE-2025-405764.3 mediumNo0.3%NULL Pointer Dereference (CWE-476)
CVE-2025-405774.3 mediumNo0.3%Out-of-bounds Read (CWE-125)
CVE-2025-405784.3 mediumNo0.3%Out-of-bounds Read (CWE-125)
CVE-2025-405796.7 mediumNo0.2%Stack-based Buffer Overflow (CWE-121)
CVE-2025-405806.7 mediumNo0.2%Stack-based Buffer Overflow (CWE-121)
CVE-2025-405817.1 highNo0.2%Authentication Bypass Using an Alternate Path or Channel (CWE-288)
CVE-2025-405827.8 highNo0.2%Improper Neutralization of Special Elements used in an OS Command (CWE-78)
CVE-2025-405834.4 mediumNo0.1%Cleartext Transmission of Sensitive Information (CWE-319)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
SiemensSCALANCE LPE9403 (6GK5998-3GS00-2AC2)vers:intdot/<4.0.0, vers:all/*, vers:intdot/<2.1.0—

Why it's on these mode pages

  • Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)

Change history

  1. May 13, 2025: Publication Date
  2. July 8, 2025: Added fix for CVE-2025-40572, CVE-2025-40573, CVE-2025-40574, CVE-2025-40575, CVE-2025-40576, CVE-2025-40577, CVE-2025-40579, CVE-2025-40580
  3. September 8, 2026: Added fix for devices with SINEMA Remote Connect Edge Client installed
  4. September 15, 2026: CISA Republication update based on Siemens ProductCERT SSA-327438 advisory
  5. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com