CVE-2025-27398

CWE-78 — OS Command Injection3 documents3 sources

Severity

2.1LOW

EPSS

0.1%

top 76.13%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Siemens Scalance Lpe9403 Siemens Scalance Lpe9403 Firmware

Timeline

PublishedMar 11

Description

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5siemens/scalance_lpe9403< V4.0

▶NVDsiemens/scalance_lpe9403_firmware< 4.0

🔴Vulnerability Details

CVEList

CVE-2025-27398: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4↗2025-03-11

▶

GHSA

GHSA-rrxp-76v8-qm7m: A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4↗2025-03-11

▶