Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-27397

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled paths to which logs are w

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files in the filesystem, if and only if the malicious path ends with 'log' .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SCALANCE LPE9403

Default version status: unknown

  • 0 to < V4.0affected

References