User Input Sanitization Flaw in SCALANCE LPE9403 by Siemens
CVE-2025-27393

8.6HIGH

Key Information:

Vendor

Siemens
Status
Scalance Lpe9403
Vendor
CVE Published:
11 March 2025

What is CVE-2025-27393?

A vulnerability exists in the SCALANCE LPE9403 (6GK5998-3GS00-2AC2) due to improper sanitization of user input during the creation of new user accounts. This security flaw could enable an authenticated, highly-privileged remote attacker to execute arbitrary code on the affected device. Users of the SCALANCE LPE9403 are urged to assess their systems and apply necessary updates to mitigate potential exploitation.

Affected Version(s)

SCALANCE LPE9403 0

References

https://cert-portal.siemens.com/productcert/html/ssa-0752...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.