Path Traversal Vulnerability in SCALANCE LPE9403 by Siemens

CVE-2025-27397

What is CVE-2025-27397?

A vulnerability exists in SCALANCE LPE9403 devices allowing an authenticated, high-privilege remote attacker to manipulate user-controlled paths. This flaw permits the attacker to read and write arbitrary files on the file system by exploiting improper path restrictions when log files are accessed. Malicious actors can leverage this vulnerability to gain unauthorized access to sensitive data, posing significant security risks.

References