ID
VAR-202405-0203
CVE
CVE-2024-32742
TITLE
Siemens' simatic cn 4100 Immutable hardware root of trust in Root of Trust Vulnerability regarding lack of
Trust: 0.8
DESCRIPTION
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem. Siemens' simatic cn 4100 It includes a hardware immutable root of trust ( Root of Trust ) is a vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Siemens SIMATIC CN 4100 is a communication node of the German company Siemens
Trust: 2.16
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | simatic cn 4100 | scope: | lt | version: | 3.0 | Trust: 1.0 |
| vendor: | シーメンス | model: | simatic cn 4100 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シーメンス | model: | simatic cn 4100 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | シーメンス | model: | simatic cn 4100 | scope: | eq | version: | 3.0 | Trust: 0.8 |
| vendor: | siemens | model: | simatic cn | scope: | eq | version: | 4100<v3.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-1326 | Trust: 1.0 |
| problemtype: | A hardware immutable root of trust ( Root of Trust )lack of (CWE-1326) [ others ] | Trust: 0.8 |
PATCH
| title: | Patch for Siemens SIMATIC CN 4100 has an unspecified vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/547161 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-32742 | Trust: 3.2 |
| db: | SIEMENS | id: | SSA-273900 | Trust: 2.4 |
| db: | JVN | id: | JVNVU90955260 | Trust: 0.8 |
| db: | ICS CERT | id: | ICSA-24-137-06 | Trust: 0.8 |
| db: | JVNDB | id: | JVNDB-2024-027560 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-23518 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-273900.html | Trust: 2.4 |
| url: | https://jvn.jp/vu/jvnvu90955260/ | Trust: 0.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-32742 | Trust: 0.8 |
| url: | https://www.cisa.gov/news-events/ics-advisories/icsa-24-137-06 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2024-23518 |
| db: | JVNDB | id: | JVNDB-2024-027560 |
| db: | NVD | id: | CVE-2024-32742 |
LAST UPDATE DATE
2025-09-01T22:55:53.163000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-23518 | date: | 2024-05-22T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-027560 | date: | 2025-08-27T07:27:00 |
| db: | NVD | id: | CVE-2024-32742 | date: | 2025-08-20T18:05:14.210 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-23518 | date: | 2024-05-24T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-027560 | date: | 2025-08-27T00:00:00 |
| db: | NVD | id: | CVE-2024-32742 | date: | 2024-05-14T16:17:12.103 |