Siemens SCALANCE LPE9403 Improper Limitation of a Pathname to a Restricted Directory (CVE-2025-27395)

Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files. This plugin only works with Tenable.ot. Please visit...

CVE-2025-27395

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 13:26:46+00:00| seen| https://t.me/cvedetector/20071 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-06...

CVE-2025-27395

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...

CVE-2025-27395

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...

CVE-2025-27395

Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) is affected. All versions prior to V4.0 expose SFTP file access with insufficient scope/privilege restrictions, enabling an authenticated, highly-privileged remote attacker to read and write arbitrary files. Root cause: inadequate restriction of file ...