Description
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SCALANCE LPE9403 | All versions < V2.1 | — |
Advisories 2
- ICSA-23-131-06 Siemens SCALANCE LPE9403 CISA ICS & IT advisories · May 6, 2025
- SSA-325383 SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 Siemens ProductCERT · May 9, 2023