VULNERABILITY INTELLIGENCE
CVE-2025-40583
CVSS score4.4 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2025-05-13
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information.
Weakness classification
- productcert@siemens.com: CWE-319
Primary references
- productcert@siemens.com — Mitigation, Vendor Advisory