CVE-2025-40581

Katalog CVE

CVSS 7.1 · High EPSS 0,16%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada siemens scalance lpe9403 firmware. Skor CVSS 3.1 7.1 (High) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters.

Rincian

Terbit di NVD

13 Mei 2025

Terakhir diubah

8 September 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber siemens.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-288: Authentication Bypass Using an Alternate Path or Channel

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/html/ssa-327438.html advisory vendor