Siemens SCALANCE LPE9403 Improper Input Sanitization Vulnerability Allowing Limited Binary Execution

A vulnerability exists in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) in all versions prior to V4.0. The issue arises because the device does not properly sanitize user-controlled log paths, allowing an authenticated, highly-privileged remote attacker to execute a limited set of binaries that are already present on the filesystem.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of binaries on the affected device.

Remediation

Users are advised to update SCALANCE LPE9403 to version 4.0 or later. Additional guidance can be found on the Siemens Industry Support website.