Critical SSA-777015 3 CVEs

SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7

Published Jan 9, 2024 · Updated Jan 9, 2024

Vendor: Siemens Product: SIMATIC CN 4100

Summary

SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device.

Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

Vulnerabilities 3

Critical 9.8

CVE-2023-49621

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system st…

Siemens SIMATIC CN 4100 ICS / OT

Jan 9, 2024
High 8.8

CVE-2023-49251

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system st…

Siemens SIMATIC CN 4100 ICS / OT

Jan 9, 2024
High 7.5

CVE-2023-49252

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP config…

Siemens SIMATIC CN 4100 ICS / OT

Jan 9, 2024

Revision history

2024-01-09 #1
Publication Date

References

SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-777015.html
SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-777015.pdf
SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-777015.txt