CVE-2025-40583
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) with SINEMA Remote Connect Edge Client installed (versions before V2.1 HF0) causes transmission of sensitive information in cleartext. A privileged local attacker could retrieve this information.
Risk Assessment
Exposure of sensitive data such as passwords or keys could enable unauthorized access to systems and compromise security.
Recommendation
Update the device firmware to version V2.1 HF0 or later to ensure encryption of transmitted information.
Other vulnerabilities in SCALANCE LPE9403
See all- CVE-2025-40582High
SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed do not properly sanitize configuration parameters. This allows a non-privileged local attacker to execute root commands on the device.
- CVE-2025-40581High
SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed are vulnerable to an authentication bypass. A non-privileged local attacker can bypass the client's authentication and read and modify configuration parameters.
Original NVD description (English source)
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information.