Beveiligingsadvies

CVE-2025-40575

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-13 09:38:59
Laatst bijgewerkt 2025-07-08 10:34:40
Toegewezen door siemens
CVSS-score 5.3
Status PUBLISHED

Beschrijving

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.