SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1
Advisory ansehen veröffentlicht 2023-05-09
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-27410US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will… | ||||
| CVE-2023-27409US | low3.3 | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This cou… | ||||
| CVE-2023-27408US | — | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mut… | ||||
| CVE-2023-27407US | critical9.9 | — | ||
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it suscepti… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - CSAF Versionself
- SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - HTML Versionself
- SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - PDF Versionself
- SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 - TXT Versionself
03
Behebungen (4)
- BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817856/ - BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817856/ - BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817856/ - BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817856/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan