Veille CVE

Recherche « Siemens SCALANCE LPE9403 »

3 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Siemens SCALANCE LPE9403 » ✕
  1. CVE-2023-27409 3.3 Faible

    Siemens SCALANCE LPE9403 · Siemens scalance lpe9403 firmware

    A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.

  2. CVE-2023-27408 3.3 Faible

    Siemens SCALANCE LPE9403 · Siemens scalance lpe9403 firmware

    A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

  3. CVE-2023-27407 9.9 Critique

    Siemens SCALANCE LPE9403 · Siemens scalance lpe9403 firmware

    A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.