CVE-2023-29130

CRITICAL

9.9

Descricao

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

Detalhes CVE

Pontuacao CVSS v3.19.9

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado7/11/2023

Ultima modificacao2/18/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

siemens:simatic_cn_4100_firmware

Fraquezas (CWE)

CWE-284

Referencias

https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf(productcert@siemens.com)

https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.