SSH Configuration Flaw in SIMATIC CN 4100 Affects Siemens Devices

CVE-2023-29131

Summary

A security weakness has been discovered in the SIMATIC CN 4100 which affects all versions prior to V2.5. This vulnerability arises from an incorrect default setting in the SSH configuration that could potentially enable unauthorized network access, allowing attackers to circumvent established network isolation protections. Such exploitation could lead to significant security risks for industrial control environments.

References