ByteOS Network

NVD Vulnerability Details :

CVE-2024-32742

Analyzed

Source-productcert@siemens.com

Published At-14 May, 2024 | 16:17

Updated At-20 Aug, 2025 | 18:05

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.6	HIGH	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CPE Matches

Siemens AG

>>simatic_cn_4100_firmware>>Versions before 3.0(exclusive)

cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>simatic_cn_4100>>-

cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1326	Secondary	productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/html/ssa-273900.html	productcert@siemens.com	Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-273900.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History