CVE-2023-29130

published 2023-07-11

CVE-2023-29130: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files…

critical 10 CVSS 3.1

AV N AC L PR N UI N S C C H I H A H

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	simatic_cn_4100	—	—
siemens	simatic_cn_4100_firmware	< 2.5	2.5

CWE-284