Vulnerability Details CVE-2025-27398
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths.
This could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.6%
CVSS Severity
CVSS v3 Score 2.7
Products affected by CVE-2025-27398
-
cpe:2.3:h:siemens:scalance_lpe9403:-
-
cpe:2.3:o:siemens:scalance_lpe9403_firmware:-
-
cpe:2.3:o:siemens:scalance_lpe9403_firmware:2.0