CVE-2025-40581
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.4
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.15%
- CWE
- CWE-288
- Published
- 2025-05-13
- Last modified
- 2026-09-08
Affected products
- Siemens SCALANCE LPE9403
Weakness type
Related vulnerabilities
- CVE-2026-20079 — Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
- CVE-2026-18577 — Incomplete patch leads to administrative account takeover
- CVE-2026-18556 — Unauthenticated administrative account takeover
- CVE-2026-28411 — WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- CVE-2026-27842 — Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication an
- CVE-2026-33950 — signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
- CVE-2026-34040 — Moby has AuthZ plugin bypass when provided oversized request bodies
- CVE-2026-32678 — Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical confi