CVE-2025-27393

Siemens SCALANCE LPE9403 (model 6GK5998-3GS00-2AC2) is affected (all versions

CVE-2025-27393

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27393

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27392

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27392

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27392

CVE-2025-27392 affects Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2), all versions before V4.0. The root cause is inadequate sanitization of input when creating VXLAN configurations, enabling an authenticated, highly-privileged remote attacker to execute arbitrary code on the device. Several sour...

CVE-2025-23384

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2.1, SCALANCE M812-1 ADSL-Router family All versions V8.2.1, SCALANCE M816...

CVE-2025-23384

The CVE-2025-23384 entry concerns Siemens devices (RUGGEDCOM RM1224 LTE and multiple SCALANCE products) affected by improper validation of usernames during OpenVPN authentication. The issue can allow a remote attacker to have partial invalid usernames accepted by the VPN server, potentially aidin...

CVE-2025-27398: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of...

Siemens SCALANCE LPE9403 操作系统命令注入漏洞

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that originates...

PT-2025-10739

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0 Description A issue has been identified where affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to...

PT-2025-10742

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0 Description A vulnerability has been identified where affected devices do not properly limit user-controlled paths to which logs are written and from where they are read. This could allow an authenticate...

Siemens SCALANCE LPE9403 操作系统命令注入漏洞

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The Siemens SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that...

CVE-2025-27392: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

PT-2025-10737

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0 Description A vulnerability has been identified where affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remo...

CVE-2025-27393: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27394: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27396: Improper Check for Dropped Privileges

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their...

PT-2025-10738

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0 Description A vulnerability has been identified where affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to...

PT-2025-10741

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0 Description A issue has been identified where affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated remote...