[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdSlEcQ90fUX7n9GbcU4643bLKgx70zkt-oTUKjPLUyo":3,"g5a-family:siemens\u002Fscalance_lpe9403_firmware":108,"g5a-ex:siemens\u002Fscalance_lpe9403_firmware@*":109},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":21,"kevVulnerabilities":76,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":18},"siemens","scalance_lpe9403_firmware",1,27,2,"2025-05-13",[14],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",0,false,"Scalance Lpe9403 Firmware by Siemens is a technology product with 1 tracked version and 27 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},[22,30,35,42,47,54,60,63,66,70],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":4,"epssScore":29},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,"v3.1","High",0.94921,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":4,"epssScore":34},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.88106,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":27,"severity":40,"isKev":17,"epssScore":41},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"Medium",0.62906,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":39,"cvssVersion":27,"severity":40,"isKev":17,"epssScore":46},"CVE-2021-36221","Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net\u002Fhttp\u002Fhttputil ReverseProxy panic upon an ErrAbortHandler abort.","2021-08-08",0.03128,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":27,"severity":52,"isKev":17,"epssScore":53},"CVE-2023-27407","A vulnerability has been identified in SCALANCE LPE9403 (All versions \u003C V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.","2023-05-09",9.9,"Critical",0.01297,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":59},"CVE-2025-27394","A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions \u003C V4.0). Affected devices do not properly sanitize user input when creating new SNMP users.\r\nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device.","2025-03-11",7.2,0.00666,{"cveId":61,"description":62,"publishedDate":57,"cvssScore":58,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":59},"CVE-2025-27393","A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions \u003C V4.0). Affected devices do not properly sanitize user input when creating new users.\r\nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device.",{"cveId":64,"description":65,"publishedDate":57,"cvssScore":58,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":59},"CVE-2025-27392","A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions \u003C V4.0). Affected devices do not properly sanitize user input when creating new VXLAN configurations.\r\nThis could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device.",{"cveId":67,"description":68,"publishedDate":57,"cvssScore":58,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":69},"CVE-2025-27395","A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions \u003C V4.0). Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality.\r\nThis could allow an authenticated highly-privileged remote attacker to read and write arbitrary files.",0.00609,{"cveId":71,"description":72,"publishedDate":50,"cvssScore":73,"cvssVersion":27,"severity":74,"isKev":17,"epssScore":75},"CVE-2023-27410","A vulnerability has been identified in SCALANCE LPE9403 (All versions \u003C V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service.",2.7,"Low",0.00556,[77,82],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"severity":28,"isKev":4,"epssScore":29,"cisaVulnName":78,"cisaDateAdded":79,"cisaShortDescription":80,"cisaRequiredAction":81},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":31,"description":32,"publishedDate":33,"cvssScore":26,"severity":28,"isKev":4,"epssScore":34,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":81},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Scalance Lpe9403 Firmware by Siemens - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Scalance Lpe9403 Firmware by Siemens covering 1 version with 27 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Scalance Lpe9403 Firmware vulnerabilities, Scalance Lpe9403 Firmware security, Scalance Lpe9403 Firmware CVE, Siemens Scalance Lpe9403 Firmware, Scalance Lpe9403 Firmware threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Scalance Lpe9403 Firmware KEV, Scalance Lpe9403 Firmware exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","Scalance Lpe9403 Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fscalance_lpe9403_firmware",{"@type":96,"name":97,"url":98},"Organization","Siemens","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsiemens","Security Software","1 versions tracked",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Scalance Lpe9403 Firmware Security Vulnerabilities","Security vulnerabilities affecting Scalance Lpe9403 Firmware by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-28T14:32:54.459Z","3.0",[],{"rows":110,"total":11,"capped":17,"failed":16},[111,116],{"cveId":23,"name":78,"severity":28,"cvss":26,"added":79,"epss":29,"published":112,"ranges":113,"checked":4,"hits":115,"covers":17},"2022-01-28T20:15:12.193",[114],"before 2.0",[],{"cveId":31,"name":83,"severity":28,"cvss":26,"added":84,"epss":34,"published":117,"ranges":118,"checked":4,"hits":119,"covers":17},"2022-03-10T17:44:57.283",[114],[]]