Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` and for the boot loader `GRUB` by default . An attacker who manages to crack the password hash gains root access to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC CN 4100 | < V3.0 | V3.0 |
Advisories 2
- ICSA-24-137-06 Siemens SIMATIC CN 4100 CISA ICS & IT advisories · May 14, 2024
- SSA-273900 SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 Siemens ProductCERT · May 14, 2024