CVE-2023-27410: Siemens Scalance LPE9403 Firmware

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service.

Affected products

• Siemens Scalance LPE9403 Firmware: before 2.1 (fixed in 2.1)

Published 2023-05-09. Last modified 2026-06-17.