SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5
view advisory published 2023-07-11
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation. Siemens has released an update for SIMATIC CN 4100 and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-29131US | critical10.0OT elevated | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an a… | ||||
| CVE-2023-29130US | critical10.0 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privileg… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - CSAF Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - HTML Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - PDF Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - TXT Versionself
03
remediations (2)
- FixedSIMATIC CN 4100
Update to V2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan