Vulnerability · Published Mar 11, 2025 · Assigned by siemens
CVE-2025-27396
High 8.8
In plain English
A high-severity security flaw in SCALANCE LPE9403 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 61.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SCALANCE LPE9403 | 0 – before V4.0 |
Weakness: CWE-273 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C