Lucene search

K

Simatic Cn 4100 Security Vulnerabilities

cve
cve

CVE-2023-29130

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

10CVSS

9.2AI Score

0.002EPSS

2023-07-11 10:15 AM
15
cve
cve

CVE-2023-29131

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.

10CVSS

9.1AI Score

0.003EPSS

2023-07-11 10:15 AM
14
cve
cve

CVE-2023-49251

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application allows an attacker to add their own login credentials to the device. This allows an attacker to remotely login as root and take control of the de...

9.8CVSS

8.9AI Score

0.001EPSS

2024-01-09 10:15 AM
16
cve
cve

CVE-2023-49252

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition.

7.5CVSS

7.3AI Score

0.0005EPSS

2024-01-09 10:15 AM
14
cve
cve

CVE-2023-49621

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device.

9.8CVSS

9.4AI Score

0.001EPSS

2024-01-09 10:15 AM
18