CVE-2024-32742CWE-1326

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)

High · published May 14, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
32.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.5th percentile
Weakness
CWE-1326 · Missing Immutable Root of Trust in Hardware
Published
2024-05-14T10:02Z
EPSS history
Timeline
  • 14 MAY 10:02Z
    A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0)
    cvelistv5