PT-2025-20876 · Siemens · Scalance Lpe9403+1

Published 2025-05-13 · Updated 2025-06-04 · CVE-2025-40581

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed

Description: A vulnerability has been identified that allows a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters. This could enable local attackers to bypass authentication and access configuration parameters.

Recommendations: For SCALANCE LPE9403 with SINEMA Remote Connect Edge Client installed, consider disabling the SINEMA Remote Connect Edge Client until a patch is available to prevent authentication bypass and unauthorized access to configuration parameters. Restrict access to the device to minimize the risk of exploitation.

Fix

LPE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2025-06084

CVE-2025-40581

Affected Products

Scalance Lpe9403

Sinema Remote Connect Client

References · 7

• https://cert-portal.siemens.com/productcert/html/ssa-327438.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40581 · Security Note
• https://bdu.fstec.ru/vul/2025-06084 · Security Note
• https://twitter.com/CveFindCom/status/1922231278562086987 · Twitter Post
• https://twitter.com/CVEnew/status/1922228920079831065 · Twitter Post
• https://twitter.com/dailycve/status/1930326128696119346 · Twitter Post
• https://t.me/cvetracker/23727 · Telegram Post