CVE-2024-32742

Published May 14, 2024

Last updated 6 months ago

Overview

Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.
Source
productcert@siemens.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.6
Impact score
6
Exploitability score
0.9
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

productcert@siemens.com
CWE-1326

Social media

Hype score
Not currently trending