As cited
Copy frozen at (site build).
vulnerabilities
Nozomi uses snapshot fuzzing to uncover four memory-corruption flaws in Siemens SCALANCE LPE9403
Nozomi Networks Labs identified four memory-corruption vulnerabilities in the Siemens SCALANCE LPE9403 industrial PC using snapshot fuzzing, a technique combining process snapshots, CPU emulation, and mutation-based testing. The flaws (CVE-2025-40575 through CVE-2025-40578, CVSS 4.0) affect the unauthenticated PROFINET Discovery and Configuration Protocol daemon running as root on affected firmware versions up to V4.0 HF0. An attacker on the same network segment could send crafted Layer 2 packets to crash the daemon, potentially blinding SCADA systems or preventing device commissioning.
Why it matters: Operators of Siemens SCALANCE LPE9403 devices should immediately assess firmware versions and apply Siemens security patches, as unauthenticated adjacent-network attackers can disable critical OT edge gateways that aggregate data and control traffic between field devices and central systems.
- Source published
- First seen by Cybersecurity Tracker