CVE-2023-49621: Critical severity Siemens Simatic Cn 4100 Firmware vulnerability
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49621?
CVE-2023-49621 is considered a high severity vulnerability due to the potential for complete control over affected devices.
How do I fix CVE-2023-49621?
To fix CVE-2023-49621, upgrade the SIMATIC CN 4100 to version 2.7 or later and ensure that default credentials are changed.
What does CVE-2023-49621 affect?
CVE-2023-49621 affects all versions of SIMATIC CN 4100 prior to version 2.7.
What kind of attack can exploit CVE-2023-49621?
An attacker can exploit CVE-2023-49621 by using the default administrative credentials to gain unauthorized access and control over the device.
Is there a patch available for CVE-2023-49621?
Yes, the patch for CVE-2023-49621 is included in the upgrade to SIMATIC CN 4100 version 2.7 or higher.