Summary
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation.
Siemens has released an update for SIMATIC CN 4100 and recommends to update to the latest version.
Vulnerabilities 2
-
Critical 9.9
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper acce…
-
High 7.4
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect …
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-313488.html
-
SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf
-
SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-313488.txt
-
ICS Advisory ICSA-23-194-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-194-03
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B