Mutex File Permission Flaw in SCALANCE LPE9403 by Siemens

CVE-2023-27408

Summary

A vulnerability in the SCALANCE LPE9403 involves a mutex file, identified as i2c, which is set with overly permissive permissions of -rw-rw-rw-. This weak configuration allows an authenticated attacker, who has access to the device's SSH interface, to manipulate the mutex, potentially compromising the integrity of the mutex and any data it safeguards. Such interference could lead to unauthorized access or modification of critical data handled by applications interacting with the i2c subsystem.

References