CRITICAL🇬🇧 English

CVE-2023-27407

CVSS 9.9v3.1pub. 2023-05-09upd. 2024-11-21

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Siemens Scalance Lpe9403

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Lpe9403 Firmware

    OS
    Siemens
    < 2.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2022-0847HIGH7.8⚠ KEVten sam produkt

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initializat...

CVE-2021-4034HIGH7.8⚠ KEVten sam produkt

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a s...

CVE-2025-40581HIGH8.4ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote ...

CVE-2025-40574HIGH8.5ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affect...

CVE-2025-40582HIGH8.5ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote ...