CVE-2023-27408

3.3 Faible

Publiée le 09/05/2023 à 15:15 · Modifiée le 24/10/2026 à 01:10 · Modifiée · Source : productcert@siemens.com

Description

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

Traduire en français

Produits concernés

Siemens SCALANCE LPE9403
Siemens scalance lpe9403 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.3 Faible	productcert@siemens.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-378

Références

https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories