CVE-2025-40580: Buffer Overflow
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40580?
CVE-2025-40580 is classified as a high-severity vulnerability due to the potential for arbitrary code execution and denial of service.
How do I fix CVE-2025-40580?
To mitigate CVE-2025-40580, it is recommended to apply the latest firmware updates provided by Siemens for the SCALANCE LPE9403 device.
Who is affected by CVE-2025-40580?
CVE-2025-40580 affects all versions of Siemens SCALANCE LPE9403 devices.
What type of vulnerability is CVE-2025-40580?
CVE-2025-40580 is categorized as a stack-based buffer overflow vulnerability.
Can CVE-2025-40580 be exploited remotely?
No, CVE-2025-40580 can only be exploited by a non-privileged local attacker.