Siemens SCALANCE LPE9403 Third-Party Vulnerabilities

Act NowCVSS 9.8ICS-CERT ICSA-22-167-09Jun 14, 2022

Siemens

Attack path

Attack VectorNetwork

Auth RequiredNone

ComplexityLow

User InteractionNone needed

Summary

Multiple vulnerabilities in third-party components (CivetWeb, Docker, Linux Kernel, systemd) in SCALANCE LPE9403 devices running firmware versions prior to 2.0 could allow remote code execution and compromise of confidentiality, integrity, and availability. The vulnerabilities include path traversal (CWE-22), incorrect access control (CWE-665, CWE-281, CWE-732), resource exhaustion (CWE-770), and information disclosure (CWE-200).

What this means

What could happen

An attacker with network access could execute commands on the SCALANCE LPE9403 device, potentially accessing sensitive network data, modifying device configuration or firewall rules, or disrupting network connectivity for critical industrial systems.

Who's at risk

Network device administrators managing Siemens SCALANCE LPE9403 Ethernet protection appliances in industrial networks, particularly those used in water authorities, electric utilities, and manufacturing facilities to provide perimeter security and network segmentation.

How it could be exploited

An attacker on the network sends specially crafted requests targeting third-party component vulnerabilities in the device's web interface or services. No authentication is required. Successful exploitation allows arbitrary code execution on the device with the privileges of the running service, potentially leading to full device compromise.

Prerequisites

Network reachability to the SCALANCE LPE9403 device on HTTP/HTTPS ports
Device running firmware version prior to 2.0

Remotely exploitableNo authentication requiredLow complexity attackActively exploited (KEV)High EPSS score (82.7%)Affects network infrastructure

Exploitability

Actively exploited — confirmed by CISA KEV

Metasploit module available — weaponized exploitView module ↗

Public Proof-of-Concept (PoC) on GitHub (10 repositories)

Affected products (12)

12 with fix

ProductAffected VersionsFix Status

RUGGEDCOM ROX MX5000< 2.17.02.17.0

RUGGEDCOM ROX MX5000RE< 2.17.02.17.0

RUGGEDCOM ROX RX1400< 2.17.02.17.0

RUGGEDCOM ROX RX1500< 2.17.02.17.0

RUGGEDCOM ROX RX1501< 2.17.02.17.0

RUGGEDCOM ROX RX1510< 2.17.02.17.0

RUGGEDCOM ROX RX1511< 2.17.02.17.0

RUGGEDCOM ROX RX1512< 2.17.02.17.0

Remediation & Mitigation

0/3

Do now

0/2

SCALANCE LPE9403

HOTFIXUpdate SCALANCE LPE9403 firmware to version 2.0 or later

WORKAROUNDRestrict network access to the SCALANCE LPE9403 management interface using firewall rules and access control lists

Long-term hardening

0/1

HARDENINGSegment industrial network to limit exposure of the device to untrusted networks

CVEs (92)

CVE-2018-1000876 CVE-2018-7169 CVE-2019-12900 CVE-2019-9893 CVE-2020-21047 CVE-2020-22217 CVE-2021-35550 CVE-2021-35559 CVE-2021-35564 CVE-2021-35567 CVE-2021-35586 CVE-2021-35588 CVE-2021-36084 CVE-2021-36086 CVE-2021-38185 CVE-2021-47361 CVE-2022-0492 CVE-2022-0850 CVE-2022-1734 CVE-2022-23039 CVE-2022-24958 CVE-2022-27223 CVE-2022-2964 CVE-2022-30594 CVE-2022-34903 CVE-2022-37032 CVE-2022-41858 CVE-2022-48626 CVE-2022-48926 CVE-2022-48948 CVE-2022-48960 CVE-2022-48962 CVE-2022-48966 CVE-2022-48967 CVE-2022-49058 CVE-2023-27043 CVE-2023-28322 CVE-2023-29383 CVE-2023-29491 CVE-2023-41358 CVE-2023-46218 CVE-2023-4641 CVE-2023-46753 CVE-2023-47234 CVE-2024-0397 CVE-2024-11168 CVE-2024-12133 CVE-2024-12243 CVE-2024-28085 CVE-2024-32487 CVE-2024-50602 CVE-2024-52533 CVE-2024-5642 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2025-0938 CVE-2021-47358 CVE-2022-0435 CVE-2022-1353 CVE-2022-20141 CVE-2022-23040 CVE-2022-2639 CVE-2022-28390 CVE-2022-3424 CVE-2022-36123 CVE-2022-37434 CVE-2022-48624 CVE-2022-48919 CVE-2022-48951 CVE-2018-12934 CVE-2018-9234 CVE-2019-14866 CVE-2020-12762 CVE-2020-35525 CVE-2021-35556 CVE-2021-35561 CVE-2021-35565 CVE-2021-35578 CVE-2021-35603 CVE-2021-36085 CVE-2021-36087 CVE-2020-27304 CVE-2021-20317 CVE-2021-33910 CVE-2021-36221 CVE-2021-39293 CVE-2021-41089 CVE-2021-41091 CVE-2021-41092 CVE-2021-41103 CVE-2022-0847

View full CISA ICS-CERT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/f526f0f7-a1b3-4abd-bb8f-85d0fc8ced06

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.