Vulnerabilidades do Siemens SCALANCE LPE9403
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Siemens SCALANCE LPE9403: 3 registro(s), com versões afetadas e correções.
CVE-2023-27409
Baixa · 3.3
CWE-22 09/05/2023
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal...
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.
CVE-2023-27407
Crítica · 9.9
CWE-78 09/05/2023
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based...
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.
CVE-2023-27408
Baixa · 3.3
CWE-378 09/05/2023
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex...
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.