Siemens SCALANCE LPE9403 Improper Neutralization of Special Elements Used in an OS Command (CVE-2025-27392)

Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly- privileged remote attacker to execute arbitrary code on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

CVE-2025-27392

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

CVE-2025-27392

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:12+00:00| seen| Telegram/7ohonUKXJXc8nNP-FALzHo1dYyqTYbEicJy56ekdY6IuU 2025-03-11 13:26:44+00:00| seen| https://t.me/cvedetector/20068 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06...

CVE-2025-27392

CVE-2025-27392 affects Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2), all versions before V4.0. The root cause is inadequate sanitization of input when creating VXLAN configurations, enabling an authenticated, highly-privileged remote attacker to execute arbitrary code on the device. Several sour...

CVE-2025-27392

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...