SCALANCE LPE9403 vulnerabilities
11 known vulnerabilities in SCALANCE LPE9403 from Siemens. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
SCALANCE LPE9403: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local
- 7.1 High severity
SCALANCE LPE9403: Authentication Bypass Using an Alternate Path or Channel
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attack
- 7.8 High severity
SCALANCE LPE9403: Out-of-bounds Write
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device o
- 7.8 High severity
SCALANCE LPE9403: Out-of-bounds Write
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device o
- 7.8 High severity
SCALANCE LPE9403: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly assign permissions to critical ressources. This could allow a non-privileged local attacker to interact with the backupmana
- 8.8 High severity
SCALANCE LPE9403: Improper Check for Dropped Privileges
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-priv
- 7.2 High severity
SCALANCE LPE9403: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new SNMP users. This could allow an authenticated highly-privileged remote attacker to execut
- 7.2 High severity
SCALANCE LPE9403: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arb
- 7.2 High severity
SCALANCE LPE9403: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly sanitize user input when creating new VXLAN configurations. This could allow an authenticated highly-privileged remote attacker
- 9.9 Critical severity
SCALANCE LPE9403: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to a
- 7.5 High severity
OpenSSL: Loop with Unreachable Exit Condition
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex