ID
VAR-202503-0301
CVE
CVE-2025-27396
TITLE
Siemens SCALANCE LPE9403 Privilege Escalation Vulnerability
Trust: 0.6
DESCRIPTION
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges. Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing of Siemens, Germany. It is used to capture, collect and pre-process industrial field data. Siemens SCALANCE LPE9403 has a privilege escalation vulnerability. Attackers can exploit this vulnerability to elevate privileges
Trust: 1.44
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | scalance lpe9403 | scope: | lt | version: | v4.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-273 | Trust: 1.0 |
PATCH
| title: | Patch for Siemens SCALANCE LPE9403 Privilege Escalation Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/673416 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-27396 | Trust: 1.6 |
| db: | SIEMENS | id: | SSA-075201 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-06058 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-075201.html | Trust: 1.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-06058 |
| db: | NVD | id: | CVE-2025-27396 |
LAST UPDATE DATE
2025-03-30T23:04:15.777000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-06058 | date: | 2025-03-28T00:00:00 |
| db: | NVD | id: | CVE-2025-27396 | date: | 2025-03-11T10:15:18.913 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-06058 | date: | 2025-03-28T00:00:00 |
| db: | NVD | id: | CVE-2025-27396 | date: | 2025-03-11T10:15:18.913 |