SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0
Advisory ansehen veröffentlicht 2024-05-14
SIMATIC CN 4100 is vulnerable to use of hard coded credentials including root user and contains an unrestricted USB port that could be misused for insecure boot. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-32742US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device cou… | ||||
| CVE-2024-32741US | —OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` a… | ||||
| CVE-2024-32740US | —OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credenti… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - CSAF Versionself
- SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - HTML Versionself
- SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - PDF Versionself
- SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0 - TXT Versionself
03
Behebungen (3)
- BehobenSIMATIC CN 4100
Update to V3.0 or later version
- BehobenSIMATIC CN 4100
Update to V3.0 or later version
- BehobenSIMATIC CN 4100
Update to V3.0 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan