SSA-777015 V1.0: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7

Risk Summary

<p>SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device.</p> <p>Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)