Simatic Cn 4100 Firmware vulnerabilities
15 known vulnerabilities in Simatic Cn 4100 Firmware from Siemens. 15 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
SIMATIC CN 4100: Allocation of Resources Without Limits or Throttling
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cau
- 9.1 Critical severity
SIMATIC CN 4100: Missing Authentication for Critical Functionality
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions. This could allow an attacker to disrupt normal o
- 9.8 Critical severity
SIMATIC CN 4100: Use of Hard-coded Credentials
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentia
- 8.8 High severity
SIMATIC CN 4100: Improper Neutralization of Special Elements used in a Command
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attack
- 9.8 Critical severity
OpenSSL: Out-of-bounds Read
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application.
- 9.8 Critical severity
Linux Kernel Improper Check for Unusual or Exceptional Conditions Exploited
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has
- 7.1 High severity
Linux: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup local
- 7.6 High severity
SIMATIC CN 4100: Missing Immutable Root of Trust in Hardware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain com
- 10.0 Critical severity
SIMATIC CN 4100: Use of Hard-coded Password
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` and for the boot loader `GRUB` by default . An attacker who manages to crack the
- 9.8 Critical severity
SIMATIC CN 4100: Use of Hard-coded Credentials
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network.
- 9.8 Critical severity
SIMATIC CN 4100: Use of Default Credentials
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control
- 7.5 High severity
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition.
- 8.8 High severity
SIMATIC CN 4100: Authorization Bypass Through User-Controlled Key
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application allows an attacker to add their own login credentials to the device. This allows an attacker to remotely logi
- 10.0 Critical severity
SIMATIC CN 4100: Incorrect Default Permissions
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.
- 10.0 Critical severity
SIMATIC CN 4100: Improper Access Control
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leadin