ByteOS Network

CVE Vulnerability Details :

CVE-2024-32740

PUBLISHED

More Info Official Page

Assigner-siemens

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-14 May, 2024 | 10:02

Updated At-02 Aug, 2024 | 02:20

▼CVE Numbering Authority (CNA)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network.

Affected Products

Vendor

Siemens AG

Product

SIMATIC CN 4100

Default Status

unknown

Versions

Affected

From 0 before V3.0 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-798	CWE-798: Use of Hard-coded Credentials

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/html/ssa-273900.html	N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Affected Products

Vendor

Siemens AG

Product

simatic_cn_4100

CPEs

cpe:2.3:a:siemens:simatic_cn_4100:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 3.0 (custom)

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/html/ssa-273900.html	x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Affected

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References