Description
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SCALANCE LPE9403 | All versions < V2.1 | — |
Advisories 2
- ICSA-23-131-06 Siemens SCALANCE LPE9403 CISA ICS & IT advisories · May 6, 2025
- SSA-325383 SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 Siemens ProductCERT · May 9, 2023