Siemens SCALANCE LPE9403 Improper Parameter Sanitization Vulnerability Allowing Root Command Execution

A vulnerability exists in Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) with all versions containing the SINEMA Remote Connect Edge Client. The issue arises because affected devices fail to properly sanitize configuration parameters, enabling a non-privileged local attacker to execute root commands on the device.

Impact

Exploitation of this vulnerability allows for unauthorized execution of root commands on the affected device.

Remediation

Siemens recommends restricting access to authorized and trusted personnel only and to use only trusted SINEMA Remote Connect Servers. Currently, no fix is available for this vulnerability.