HIGH🇵🇱 Wersja polska

CVE-2025-40582

CVSS 8.5v4.0pub. 2025-05-13upd. 2025-05-30

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the device.

CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Siemens Scalance Lpe9403

    HW
    Siemens
    wszystkie wersje

  • Siemens Scalance Lpe9403 Firmware

    OS
    Siemens
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2023-27407CRITICAL9.9ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of aff...

CVE-2022-0847HIGH7.8⚠ KEVten sam produkt

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initializat...

CVE-2021-4034HIGH7.8⚠ KEVten sam produkt

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a s...

CVE-2025-40574HIGH8.5ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affect...

CVE-2025-40581HIGH8.4ten sam produkt

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote ...