CVE-2025-40581
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed are vulnerable to an authentication bypass. A non-privileged local attacker can bypass the client's authentication and read and modify configuration parameters.
Risk Assessment
Authentication bypass could allow unauthorized modification of device configuration, potentially leading to network and data security breaches.
Recommendation
Update the software to version V2.1 HF0 or later and monitor local access to the devices.
Other vulnerabilities in SCALANCE LPE9403
See all- CVE-2025-40583Medium
A vulnerability in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) with SINEMA Remote Connect Edge Client installed (versions before V2.1 HF0) causes transmission of sensitive information in cleartext. A privileged local attacker could retrieve this information.
- CVE-2025-40582High
SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed do not properly sanitize configuration parameters. This allows a non-privileged local attacker to execute root commands on the device.
Original NVD description (English source)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters.