Siemens SCALANCE LPE9403 Profinet Packet Handling Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Siemens SCALANCE LPE9403 devices (6GK5998-3GS00-2AC2, all versions). The issue arises because affected devices do not properly manage multiple incoming Profinet packets received in quick succession. This flaw can be exploited by an unauthenticated remote attacker, who can send multiple packets in a short time frame, causing the dcpd process to crash.

Impact

Exploitation of this vulnerability leads to a crash of the dcpd process, causing a denial-of-service condition on the device.

Remediation

Siemens recommends disabling the Profinet Discovery and Configuration Protocol (DCP) service on affected devices. For general security, it is advised to protect network access to devices with appropriate measures and to follow Siemens' operational guidelines for Industrial Security.