#VU105646 Path traversal in SCALANCE LPE9403 - CVE-2025-27395

Vulnerability identifier: #VU105646

Vulnerability risk: Low

CVSSv4.0: 7.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2025-27395

CWE-ID: CWE-22

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
SCALANCE LPE9403
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor: Siemens

Description

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote administrator can send a specially crafted HTTP request and read/write arbitrary files on the system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SCALANCE LPE9403: before 4.0

---

External links
https://cert-portal.siemens.com/productcert/html/ssa-075201.html

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.