CVE-2025-40572: Medium severity siemens scalance lpe9403 firmware vulnerability
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources. This could allow a non-privileged local attacker to access sensitive information stored on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40572?
CVE-2025-40572 has been classified with a high severity level due to unauthorized access to sensitive information.
How do I fix CVE-2025-40572?
To fix CVE-2025-40572, ensure that your SCALANCE LPE9403 device is updated with the latest security patches provided by Siemens.
Who is affected by CVE-2025-40572?
CVE-2025-40572 affects all versions of the Siemens SCALANCE LPE9403 devices.
Can CVE-2025-40572 be exploited remotely?
CVE-2025-40572 requires local access for exploitation, meaning a non-privileged local attacker must be physically present to exploit the vulnerability.
What types of resources are affected by CVE-2025-40572?
CVE-2025-40572 affects critical resources within the SCALANCE LPE9403 device, allowing unauthorized access to sensitive information.