PT-2025-10741 · Siemens · Scalance Lpe9403

Published 2025-03-11 · Updated 2025-03-11 · CVE-2025-27396

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V4.0

Description A issue has been identified where affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated remote attacker with low privileges to escalate their privileges.

Recommendations For versions prior to V4.0, update to version V4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to functions that require privilege elevation until a patch is available.

Fix

LPE

Weakness Enumeration

CWE-273

Related Identifiers

BDU:2025-03171

CVE-2025-27396

Affected Products

Scalance Lpe9403

References · 11

• https://osv.dev/vulnerability/CVE-2025-27396 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-075201.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03171 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27396 · Security Note
• https://t.me/cvedetector/20072 · Telegram Post
• https://twitter.com/vulns_space/status/1899408316301795336 · Twitter Post
• https://twitter.com/CveFindCom/status/1899400443979018645 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-072-06 · Note
• https://t.me/latest_high_impact_cve/1949 · Telegram Post
• https://twitter.com/CVEnew/status/1899404037948117183 · Twitter Post
• https://t.me/cvetracker/18929 · Telegram Post