Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC CN 4100 | < V3.0 | V3.0 |
Advisories 2
- ICSA-24-137-06 Siemens SIMATIC CN 4100 CISA ICS & IT advisories · May 14, 2024
- SSA-273900 SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 Siemens ProductCERT · May 14, 2024