Düşük CVSS 3.3
CVE-2023-27409: Scalance Lpe9403 Firmware: dizin geçişi
Açıklama (NVD)
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.
Özet bilgiler
- Ürün
- Siemens Scalance Lpe9403 Firmware
- CVSS v3.1
- 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,17 (yüzdelik 7)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-scalance-lpe9403-firmware | — | — | 2.1 |