Siemens SCALANCE LPE9403 Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution or Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2), affecting all versions. This vulnerability allows a non-privileged local attacker to execute arbitrary code on the device or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected device or cause a denial-of-service condition.

Remediation

Currently, no fix is available for this vulnerability. Siemens recommends restricting access to authorized and trusted personnel only. As a general security measure, it is advised to protect network access to devices with appropriate mechanisms and to follow Siemens' operational guidelines for Industrial Security.