CVE-2025-27396 Privilege escalation in SCALANCE LPE9403

Q: Is CVE-2025-27396 being exploited?

There is no known exploitation of CVE-2025-27396 in the wild and no public exploit code.

Q: How do I fix CVE-2025-27396?

No fix has been published for CVE-2025-27396 yet. Limit exposure of the affected software until one is available.

High 8.7 Published 11 Mar 2025 Updated 11 Mar 2025

An authenticated low-privileged remote attacker can escalate privileges on Siemens SCALANCE LPE9403 devices due to improper privilege limitation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-27396?

CVE-2025-27396 is a high-severity vulnerability in Siemens SCALANCE LPE9403, published on 11 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to perform certain valid functionality. This could allow an authenticated lowly-privileged remote attacker to escalate their privileges.

Weakness: CWE-273

Which versions are affected by CVE-2025-27396?

It affects 1 product.

Products include Siemens Scalance Lpe9403 Firmware.

How do I fix CVE-2025-27396?

No fix has been published for CVE-2025-27396 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-27396 being exploited?

There is no known exploitation of CVE-2025-27396 in the wild and no public exploit code.

Sources

Also known as GHSA-vqjq-9hcq-43hf.