Security Advisory

CVE-2025-27398

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-11 09:48:30
Last updated 2025-03-11 13:30:28
Assigner siemens
CVSS score 2.7
State PUBLISHED

Description

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem.