Vulnerability · Published May 9, 2023 · Assigned by siemens
CVE-2023-27410
Low 2.7
In plain English
A low-severity heap buffer overflow in SCALANCE LPE9403 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.6%top 53.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SCALANCE LPE9403 | All versions < V2.1 |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C