PT-2023-8243 · Siemens · Simatic Cn 4100

Published 2023-11-24 · Updated 2024-01-12 · CVE-2023-49251

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V2.7

Description A vulnerability has been identified that allows an attacker to add their own login credentials to the device during the "intermediate installation" system state. This enables the attacker to remotely login as root and take control of the device even after it is fully set up. The issue is related to bypassing authorization using a user-controlled key, which can allow a remote attacker to enter the system and gain full control over the application.

Recommendations For versions prior to V2.7, update to version V2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the device during the "intermediate installation" state to minimize the risk of exploitation.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2024-00276

CVE-2023-49251

Affected Products

Simatic Cn 4100

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-777015.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00276 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49251 · Security Note
• https://vuldb.com/?id.250083 · Note
• https://twitter.com/CVEnew/status/1744670230587101626 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1744691254577783063 · Twitter Post