Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-27408

Опубликовано: 09 мая 2023
Источник: nvd
CVSS3: 3.3
EPSS Низкий

Описание

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*
Версия до 2.1 (исключая)
cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:*

EPSS

Процентиль: 9%
0.00033
Низкий

3.3 Low

CVSS3

Дефекты

CWE-378

Связанные уязвимости

CVSS3: 3.3
github
больше 2 лет назад

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects.

EPSS

Процентиль: 9%
0.00033
Низкий

3.3 Low

CVSS3

Дефекты

CWE-378