CVE-2023-27410

SCALANCE LPE9403 (versions prior to 2.1) is affected by a heap-based buffer overflow in the edgebox_web_app binary. The issue triggers when a backup password longer than 255 characters is supplied, potentially allowing an authenticated privileged attacker to cause a denial of service. Mitigation ...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

CVE-2023-27409

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file...

CVE-2023-27409

The CVE-2023-27409 entry affects Siemens SCALANCE LPE9403 (versions

CVE-2023-27409

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file...

CVE-2023-27408

Siemens SCALANCE LPE9403 is affected by CVE-2023-27408. All versions prior to V2.1 have an insecurely created i2c mutex file with permissions -rw-rw-rw-, used as a mutex for i2c-accessing applications. An authenticated attacker with SSH access to the device could interfere with the mutex and pote...

CVE-2023-27408

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interfac...

CVE-2023-27408

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interfac...

CVE-2023-27407

CVE-2023-27407 affects Siemens SCALANCE LPE9403 (all versions

CVE-2023-27407

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as...

CVE-2023-27407

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as...

Siemens SCALANCE 安全漏洞

Siemens SCALANCE LPE9403 is the local processing driver. A security vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the SSH interface on an affected device, thereby interfering with the integrity of the mutex object and the data it...

PT-2023-21098 · Siemens · Scalance Lpe9403

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions prior to V2.1 Description: A vulnerability has been identified where the i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in SIMATIC Cloud Connect, Siveillance, SINEC, Solid Edge and Scalance products. The vulnerabilities potentially enable a malicious party to launch attacks execute attacks that could result in the following categories of damage: Denial-of-Service DoS Manipulation ...

Siemens SCALANCE LPE9403

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE 路径遍历漏洞

Siemens SCALANCE LPE9403 is the local processing driver. A path traversal vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the SSH interface on an affected device to read the contents of any file named address...

Siemens SCALANCE 操作系统命令注入漏洞

Siemens SCALANCE LPE9403 is the local processing driver. A command injection vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the underlying operating system as root...

Siemens SCALANCE 安全漏洞

Siemens SCALANCE LPE9403 is the local processing driver. A heap buffer overflow vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to cause a denial of service...

Siemens SCALANCE W1750D

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...