Siemens SIMATIC CN 4100
view advisory published 2024-01-09
SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-49621US | —OT elevated | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with… | ||||
| CVE-2023-49252US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This cou… | ||||
| CVE-2023-49251US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application allows an attacker to add the… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - CSAF Versionself
- SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - HTML Versionself
- SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - PDF Versionself
- SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 - TXT Versionself
- ICS Advisory ICSA-24-011-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-011-09 - Web Versionself
- Recommended Practicesexternal
03
remediations (3)
- FixedSIMATIC CN 4100
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan