VULNERABILITY INTELLIGENCE

CVE-2023-29130

CVSS score9.9 CRITICAL
EPSS probability0.56%
CISA KEVNot currently listed
Published2023-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

Weakness classification

  • productcert@siemens.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references