The vulnerability of the MICROprogramming software of the SIMATIC CN 4100 communication gateway lies in the absence of an immutable root certificate in the equipment. This allows a malicious actor to gain access to read or write data in the device’s file system.

The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to the absence of an immutable trust root in the equipment. Exploiting this vulnerability can allow attackers to gain access to read or write data in the device’s file system through an unlimited...