CYBERSECURITYTRACKER
Permanent story citation

Nozomi identifies 12 vulnerabilities in Siemens SCALANCE LPE9403, enabling root access and OT network attacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7773

As cited

Copy frozen at (site build).

vulnerabilities

Nozomi identifies 12 vulnerabilities in Siemens SCALANCE LPE9403, enabling root access and OT network attacks

Nozomi Networks Labs identified 12 vulnerabilities in Siemens SCALANCE LPE9403 Local Processing Engine devices, with nine affecting firmware below V4.0 HF0 and three affecting systems with SINEMA Remote Connect Edge Client through V2.1. Multiple vulnerabilities can be chained to achieve root-level access, enabling attackers to manipulate telemetry, suppress alarms, exfiltrate operational data, or disrupt critical services across OT networks. Siemens has released patches, and asset owners must apply updates immediately and implement network segmentation to reduce exposure.

Why it matters: Organizations operating Siemens SCALANCE LPE9403 devices in industrial environments face immediate risk of data manipulation, service disruption, and lateral movement across multiple OT networks if devices are not updated to firmware V4.0 HF0 or later, or if SINEMA Remote Connect clients are not updated to version V2.1 or later.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary