CVE-2023-29130

10.0 criticalEPSS 0.6%

Critical (10.0) in siemens simatic cn 4100 firmware. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2023-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:simatic_cn_4100_firmware

References

https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf

Check your stack JSON