CVE-2023-29130

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-11 · updated 2026-06-17
Weakness: CWE-284

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control.

Affected products

Siemens SIMATIC CN 4100: before 2.5 — fixed in 2.5

How to fix

Upgrade to a fixed version: Siemens SIMATIC CN 4100 2.5. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf

Get alerted when CVE-2023-29130 or the next vulnerability affects your stack