CVE-2025-27393
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 78
Summary
CVE-2025-27393 is a newly discovered vulnerability affecting SCALANCE LPE9403 industrial switches with firmware versions below V4.0 (6GK5998-3GS00-2AC2). The issue lies in the device's failure to sanitize user input during the creation of new user accounts. An authenticated, highly-privileged remote attacker can exploit this flaw to execute arbitrary code on the affected switches. This vulnerability poses a significant risk to industrial networks and requires immediate attention and patching from affected organizations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.