CRITICAL🇵🇱 Wersja polska

CVE-2023-27407

CVSS 9.9v3.1pub. 2023-05-09upd. 2024-11-21

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Siemens Scalance Lpe9403

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Lpe9403 Firmware

    OS
    Siemens
    < 2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2022-0847HIGH7.8⚠ KEVten sam produkt

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initializat...

CVE-2021-4034HIGH7.8⚠ KEVten sam produkt

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a s...

CVE-2025-40581HIGH8.4ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote ...

CVE-2025-40574HIGH8.5ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affect...

CVE-2025-40582HIGH8.5ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote ...