CVE-2025-27397

Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) is affected by CVE-2025-27397. All versions below V4.0 fail to properly restrict user-controlled log paths, enabling an authenticated, highly-privileged attacker to read and write arbitrary files if the path ends with 'log'. Connected sources confirm ...

Information Disclosure

The vulnerability of the Cisco Smart Software Manager On-Premise administration software’s high availability feature is related to the presence of a statistical password for the standard account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read and...