VDB

CVE-2023-27407

CVE-2023-27407 PUBLISHED CVSS 8.600000381469727 HIGH

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

EPSS 1.30% · 70.4th percentile

Risk Scores

CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.30%
70.4th percentile

Affected Products

VendorProductVersions
SiemensSCALANCE LPE9403All versions < V2.1
siemensscalance_lpe9403_firmware0

Timeline

  • May 9, 2023 CVE Published
  • May 10, 2023 EPSS Score
  • Jun 17, 2023 EPSS Score
  • Jul 24, 2023 EPSS Score
  • Oct 7, 2023 EPSS Score
  • Nov 14, 2023 EPSS Score
  • Dec 21, 2023 EPSS Score
  • Jan 28, 2024 EPSS Score
  • Apr 12, 2024 EPSS Score
  • May 19, 2024 EPSS Score
  • Jun 26, 2024 EPSS Score
  • Aug 2, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›