CVE-2024-32742
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.
Published:May 14, 2024
Last Modified:Aug 20, 2025
EPS:May 14, 2024
EPSS Score:0.001
CVSS Score:7.6
Affected Products
Vendor
Product
Action
Vendor
Siemens
Product
Simatic Cn 4100
Siemens
Simatic Cn 4100
Vendor
Siemens
Product
Simatic Cn 4100 Firmware
Siemens
Simatic Cn 4100 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
