Input Sanitization Flaw in SCALANCE LPE9403 by Siemens

CVE-2025-27392

What is CVE-2025-27392?

A vulnerability exists in the SCALANCE LPE9403 device line, specifically in versions prior to V4.0, which fails to adequately sanitize user input during the creation of VXLAN configurations. This lack of proper input validation may enable an authenticated attacker with high privileges to run arbitrary code on the device, thereby compromising its integrity and functionality. Securing these devices against this vulnerability is essential to prevent unauthorized access and potential malicious activities.

References