Critical SSA-273900 3 CVEs

SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0

Published May 14, 2024 · Updated May 14, 2024

Vendor: Siemens Product: SIMATIC CN 4100

Summary

SIMATIC CN 4100 is vulnerable to use of hard coded credentials including
root user and contains an unrestricted USB port that could be misused for insecure boot.
Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

Vulnerabilities 3

Critical 10.0

CVE-2024-32741

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded p…

Siemens SIMATIC CN 4100 ICS / OT

May 14, 2024
Critical 9.8

CVE-2024-32740

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented…

Siemens SIMATIC CN 4100 ICS / OT

May 14, 2024
High 7.6

CVE-2024-32742

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestric…

Siemens SIMATIC CN 4100 ICS / OT

May 14, 2024

Revision history

2024-05-14 #1
Publication Date

References

SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-273900.html
SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-273900.pdf
SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-273900.txt