Siemens Scalance Lpe9403 vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Siemens Scalance Lpe9403, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-27394siemensscalance_lpe9403_firmware
EPSS score0.73%
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new SNMP users.
This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device.CVE-2022-0847debianlinux+116KEVEPSS score92.80%
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.CVE-2023-27408siemensscalance_lpe9403_firmwareEPSS score0.17%
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.CVE-2023-27407siemensscalance_lpe9403_firmwareEPSS score1.30%
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.CVE-2023-27410siemensscalance_lpe9403_firmwareEPSS score0.56%
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service.CVE-2023-27409siemensscalance_lpe9403_firmwareEPSS score0.17%
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.