High ICSA-25-072-06 7 CVEs

Siemens SCALANCE LPE9403

Published Mar 11, 2025 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: SCALANCE LPE9403 (6GK5998-3GS00-2AC2)

Summary

SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability.

Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version.

Vulnerabilities 7

High 8.8

CVE-2025-27396

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
High 7.2

CVE-2025-27392

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
High 7.2

CVE-2025-27393

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
High 7.2

CVE-2025-27394

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
High 7.2

CVE-2025-27395

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
Low 3.8

CVE-2025-27397

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025
Low 2.7

CVE-2025-27398

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do…

Siemens SCALANCE LPE9403 ICS / OT

Mar 11, 2025

Revision history

2025-05-06 #2
Revision - Fixing typos
2025-03-11 #1
Publication Date

References

SSA-075201: Multiple Vulnerabilities in SCALANCE LPE9403 Before V4.0 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-075201.html
ICS Advisory ICSA-25-072-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B