CVE-2023-27409 LOW

CVE-2023-27409

Vendor Siemens
Product SCALANCE LPE9403
Weakness CWE-22 · Path traversal
Published May 9, 2023
Last update January 28, 2025
View on NVD All CVEs

CVSS base score

2.5/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.

Key dates

02Disclosure timeline

May 9, 2023 CVE published
January 28, 2025 Record updated