QID 591295

Date Published: 2023-01-20

QID 591295: Siemens SCALANCE LPE 4903 Out-of-bounds Write Vulnerability (ICSA-22-167-16, SSA-330556)

AFFECTED PRODUCTS
SCALANCE LPE9403: All versions prior to v2.0

QID Detection Logic:
This QID checks for the Vulnerable version of Siemens SCALANCE LPE 4903 using passive scanning

Successful exploitation of this vulnerability could allow an unprivileged local user to escalate privileges and gain administrative rights.

  • CVSS V3 rated as High - 7.8 severity.
  • CVSS V2 rated as High - 7.2 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-22-167-16 for affected packages and patching details.

    Vendor References

    CVEs related to QID 591295

    Software Advisories
    Advisory ID Software Component Link