Product by Siemens
Scalance Lpe9403 Firmware
27 known vulnerabilities in Scalance Lpe9403 Firmware (Siemens), 2 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
2
Actively exploited (KEV)
1
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability In CISA KEVRansomwarealso in 30 other products | 7.8 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEValso in 30 other products | 7.8 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| Critical | CVE-2023-27407 | Siemens SCALANCE LPE9403: OS Command Injection | 9.9 | |
| Medium | CVE-2021-36221 | Go: Race Condition | 5.9 | |
| High | CVE-2025-27394 | Siemens SCALANCE LPE9403: OS Command Injection | 7.2 | |
| High | CVE-2025-27393 | Siemens SCALANCE LPE9403: OS Command Injection | 7.2 | |
| High | CVE-2025-27392 | Siemens SCALANCE LPE9403: OS Command Injection | 7.2 | |
| High | CVE-2025-27395 | Siemens SCALANCE LPE9403: Path Traversal | 7.2 | |
| High | CVE-2025-27396 | Siemens SCALANCE LPE9403: Improper Check for Dropped Privileges | 8.8 | |
| High | CVE-2025-40582 | Siemens SCALANCE LPE9403: OS Command Injection | 7.8 | |
| High | CVE-2025-40574 | Siemens SCALANCE LPE9403: Incorrect Permission Assignment for Critical Resource | 7.8 | |
| High | CVE-2025-40581 | Siemens SCALANCE LPE9403: Authentication Bypass Using an Alternate Path or Channel | 7.1 | |
| Medium | CVE-2025-40575 | Siemens SCALANCE LPE9403: Use of Uninitialized Variable | 4.3 | |
| Medium | CVE-2025-27397 | Siemens SCALANCE LPE9403: Path Traversal | 3.8 | |
| Medium | CVE-2025-40572 | Siemens SCALANCE LPE9403: Incorrect Permission Assignment for Critical Resource | 5.5 | |
| Medium | CVE-2025-40573 | Siemens SCALANCE LPE9403: Path Traversal: '.../...//' | 4.4 | |
| High | CVE-2025-40579 | Siemens SCALANCE LPE9403: Stack-based Buffer Overflow | 6.7 | |
| High | CVE-2025-40580 | Siemens SCALANCE LPE9403: Stack-based Buffer Overflow | 6.7 | |
| Medium | CVE-2025-40583 | Siemens SCALANCE LPE9403: Cleartext Transmission of Sensitive Information | 4.4 | |
| Medium | CVE-2025-40578 | Siemens SCALANCE LPE9403: Out-of-bounds Read | 4.3 | |
| Medium | CVE-2025-40577 | Siemens SCALANCE LPE9403: Out-of-bounds Read | 4.3 | |
| Medium | CVE-2025-40576 | Siemens SCALANCE LPE9403: NULL Pointer Dereference | 4.3 | |
| Low | CVE-2023-27410 | Siemens SCALANCE LPE9403: Heap-based Buffer Overflow | 2.7 | |
| Low | CVE-2025-27398 | Siemens SCALANCE LPE9403: OS Command Injection | 2.7 |
News
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- SSA-330556 V1.0: PwnKit Vulnerability in SCALANCE LPE9403 and SINUMERIK Edge Products (CVE-2021-4034)siemens-productcert