CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-40583 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext.
This could allow a privileged local attacker to retrieve this sensitive information.
CVSS: MEDIUM (4.4) EPSS Score: 0.01%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40580 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to a stack-based buffer overflow.
This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
CVSS: MEDIUM (6.7) EPSS Score: 0.01%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40579 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to a stack-based buffer overflow.
This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition.
CVSS: MEDIUM (6.7) EPSS Score: 0.01%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40578 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession.
An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short time frame, which leads to a crash of the dcpd process.
CVSS: MEDIUM (4.3) EPSS Score: 0.04%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40577 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.
CVSS: MEDIUM (4.3) EPSS Score: 0.04%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40576 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.
CVSS: MEDIUM (4.3) EPSS Score: 0.04%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40575 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets.
An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd
process.
CVSS: MEDIUM (4.3) EPSS Score: 0.1%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40573 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to path traversal attacks.
This could allow a privileged local attacker to restore backups that are outside the backup folder.
CVSS: MEDIUM (4.4) EPSS Score: 0.02%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40572 |
Description: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly assign permissions to critical ressources.
This could allow a non-privileged local attacker to access sensitive information stored on the device.
CVSS: MEDIUM (5.5) EPSS Score: 0.01%
May 13th, 2025 (about 1 month ago)
|
|
CVE-2025-40556 |
Description: A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation.
CVSS: MEDIUM (6.5) EPSS Score: 0.02%
May 13th, 2025 (about 1 month ago)
|