Critical SSA-325383 4 CVEs

SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1

Published May 9, 2023 · Updated May 9, 2023

Vendor: Siemens Product: SCALANCE LPE9403 (6GK5998-3GS00-2AC2)

Summary

SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability.

Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.

Vulnerabilities 4

Critical 9.9

CVE-2023-27407

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected dev…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 3.3

CVE-2023-27408

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 2.7

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerabili…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023
Low 2.5

CVE-2023-27409

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found…

Siemens SCALANCE LPE9403 ICS / OT

May 9, 2023

Revision history

2023-05-09 #1
Publication date

References

SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-325383.html
SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf
SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-325383.txt