low2.5
CVE-2023-27409
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).
Impact
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance Lpe9403 Firmware | before 2.1 |