Siemens SIMATIC CN 4100
Advisory ansehen veröffentlicht 2023-07-11
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation. Siemens has released an update for SIMATIC CN 4100 and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-29131US | critical10.0OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an a… | ||||
| CVE-2023-29130US | critical10.0 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privileg… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - CSAF Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - HTML Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - PDF Versionself
- SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5 - TXT Versionself
- ICS Advisory ICSA-23-194-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-194-03 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSIMATIC CN 4100
Update to V2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - BehobenSIMATIC CN 4100
Update to V2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan