CVE-2024-32740

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network...

CVE-2024-32742: Missing Immutable Root of Trust in Hardware

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

Siemens SIMATIC CN 4100 安全漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability exists in the Siemens SIMATIC CN 4100 because the affected device contains an unrestricted USB port. An attacker can exploit the vulnerability to potentially misuse the port to boot another operati...

Siemens SIMATIC CN 4100 安全漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A hard-coded password vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to gain root access to the device...

CVE-2024-32741: Use of Hard-coded Password

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device...

Siemens SIMATIC CN 4100

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC CN 4100 信任管理问题漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability exists in the Siemens SIMATIC CN 4100 due to an affected device containing undocumented users and credentials. An attacker could exploit the vulnerability to misuse the credentials to compromise th...

CVE-2024-32740: Use of Hard-coded Credentials

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network...

CVE-2013-4100

creationtimestamp| type| source ---|---|--- 2024-02-01 18:46:33+00:00| seen| https://t.me/ctinow/177736...

MAL-2024-539 Malicious code in wlwz-2312-4100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad059ea99e89a01ce7eb57bf120e092629c73cc63b57ea46e8d3d152e138408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad059ea99e89a01ce7eb57bf120e092629c73cc63b57ea46e8d3d152e138408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway, which stems from insufficient validation of input data, allows a intruder to alter the IP configuration and trigger a service failure.

The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to alter the IP configuration and cause service failures...

The vulnerability of the intermediate installation process for microprogrammed software on the SIMATIC CN 4100 communication gateway allows a intruder to gain full control over the application.

The vulnerability of the intermediate installation process for microprogrammed communication gateway software SIMATIC CN 4100 is related to the use of default account data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application...

Siemens SIMATIC CN 4100 Input Validation Error Vulnerability

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. An input validation error vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to cause a denial of service...

Siemens SIMATIC CN 4100 Using Default Credentials Vulnerability

The SIMATIC CN 4100 is a communication node that can be connected to third-party systems. A Use Default Credentials vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to gain full control of an affected device using credentials...

CVE-2023-49621

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device...

CVE-2023-49252

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition...

CVE-2023-49621

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device...

CVE-2023-49252

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition...

CVE-2023-49251

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The "intermediate installation" system state of the affected application allows an attacker to add their own login credentials to the device. This allows an attacker to remotely login as root and take control of the device...