Path Traversal Vulnerability in SCALANCE LPE9403 (All versions < V2.1) via `deviceinfo` Binary

CVE-2023-27409 · LOW Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.

Learn more about our Web Application Penetration Testing UK.