Siemens SCALANCE LPE9403 Path Traversal Vulnerability Allowing Unauthorized Backup Access

A path traversal vulnerability has been identified in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2), affecting all versions. This vulnerability allows a privileged local attacker to access and restore backups located outside the designated backup folder, potentially leading to unauthorized data retrieval.

Impact

Exploitation of this vulnerability could result in unauthorized access to backup data, allowing for data restoration from outside the specified backup directory.

Remediation

Currently, no fix is available for this vulnerability. Siemens recommends restricting access to authorized and trusted personnel only. For further guidance, consult the Siemens General Security Recommendations and the operational guidelines for Industrial Security.