Heap-based Buffer Overflow Vulnerability in SCALANCE LPE9403 by Siemens

CVE-2023-27410

What is CVE-2023-27410?

A heap-based buffer overflow vulnerability has been identified in the SCALANCE LPE9403 product from Siemens. This issue resides within the edgebox_web_app binary, which is susceptible to crashing when a backup password exceeding 255 characters is provided. An authenticated user with elevated privileges could exploit this vulnerability to induce a denial of service, making it crucial for users of SCALANCE LPE9403 to assess their systems and implement necessary security measures.

References