CVE-2023-27409

CWE-22 — Path Traversal3 documents3 sources

Severity

3.3LOW

EPSS

0.1%

top 75.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Siemens Scalance Lpe9403 Firmware Siemens Scalance Lpe9403

Timeline

PublishedMay 9

Description

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.0 | Impact: 1.4

Affected Packages2 packages

▶NVDsiemens/scalance_lpe9403_firmware< 2.1

▶CVEListV5siemens/scalance_lpe9403All versions < V2.1

🔴Vulnerability Details

GHSA

GHSA-gj9w-8jqj-698c: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2↗2023-05-09

▶

CVEList

CVE-2023-27409: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2↗2023-05-09

▶