PT-2023-8242 · Siemens · Simatic Cn 4100

Published 2023-11-28 · Updated 2024-01-17 · CVE-2023-49621

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V2.7

Description A vulnerability has been identified in the intermediate installation process of the SIMATIC CN 4100 communication gateway, which is related to the use of default credentials with admin privileges. This could allow a remote attacker to gain complete control of the affected device.

Recommendations For versions prior to V2.7, update to version V2.7 or later to resolve the issue. As a temporary workaround, consider changing the default credentials to custom ones to prevent exploitation. Restrict access to the intermediate installation system state to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-1392

CWE-255

Related Identifiers

BDU:2024-00275

CVE-2023-49621

Affected Products

Simatic Cn 4100

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-49621 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-777015.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-49621 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00275 · Security Note
• https://twitter.com/the_yellow_fall/status/1747812449779360177 · Twitter Post
• https://twitter.com/vuldb/status/1744707609389850669 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1744685923223118064 · Twitter Post
• https://vuldb.com/ru/?id.250098 · Note
• https://twitter.com/CVEnew/status/1744664609901125787 · Twitter Post