Siemens SCALANCE LPE9403 SFTP Privilege Escalation Vulnerability

A vulnerability exists in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) in all versions prior to 4.0. The issue arises because the SFTP functionality does not properly restrict the scope of accessible files or the privileges granted. This flaw could enable an authenticated, highly-privileged remote attacker to read and write arbitrary files on the device.

Impact

Exploitation of this vulnerability could lead to unauthorized reading and writing of files on the affected device.

Remediation

Users are advised to update SCALANCE LPE9403 to version 4.0 or later. Additional information can be found on the Siemens support website.