Siemens SCALANCE LPE9403 Privilege Escalation Vulnerability

A vulnerability exists in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) in all versions prior to 4.0. The issue arises because affected devices do not adequately restrict the elevation of privileges needed to access certain legitimate functions. This flaw could enable an authenticated, low-privileged remote attacker to escalate privileges.

Impact

Exploitation of this vulnerability could allow a low-privileged authenticated remote attacker to gain elevated privileges on the affected device.

Remediation

Users are advised to update SCALANCE LPE9403 to version 4.0 or later. Additional guidance can be found on the Siemens support portal.