10.0
Critical
CVE-2024-32741 A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)
Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` and for the boot loader `GRUB` by default . An attacker who manages to crack the password hash gains root access to the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC CN 4100 3.0 | earliest → < 3.0 | 3.0 |
| simatic_cn_4100 3.0 | earliest → < 3.0 | 3.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC CN 4100
The 187 CVEs of SIMATIC CN 4100 →
CVE-2026-22925
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
7.5
High
CVE-2026-22924
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
9.1
Critical
CVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
7.8
High
CVE-2026-31790
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of…
Not rated