by Kastro
Paper/Archive/CVE-2024-32740

CVE-2024-32740

Siemens SIMATIC CN 4100 — A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0).

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.3.533 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network.

Affected

ProductAffectedFixed inSource
SIMATIC CN 4100< V3.0V3.0CNA
simatic_cn_4100< 3.03.0CISA-ADP

Scores by source

siemens (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcert-portal.siemens.com/productcert/html/ssa-273900.html