Filtered by vendor Siemens Subscriptions
Filtered by product Simatic Cn 4100 Firmware Subscriptions

Search

Switch to Advanced Search (Beta)
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-40937 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-12-10 8.3 High
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.
CVE-2025-40938 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-12-10 8.1 High
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability.
CVE-2025-40940 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-12-10 4.9 Medium
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.
CVE-2025-40941 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-12-10 4.3 Medium
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.
CVE-2024-32741 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-08-26 10 Critical
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` and for the boot loader `GRUB` by default . An attacker who manages to crack the password hash gains root access to the device.
CVE-2024-32740 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-08-20 9.8 Critical
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network.
CVE-2024-32742 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2025-08-20 7.6 High
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.