Unauthorized IP Configuration Changes in SIMATIC CN 4100 by Siemens

CVE-2023-49252

What is CVE-2023-49252?

A security weakness exists in the SIMATIC CN 4100, impacting all versions prior to V2.7. This flaw permits unauthorized modifications to IP configurations, which could lead to the disruption of service. The lack of authentication for such changes could be exploited by an attacker, potentially resulting in a denial of service. Organizations utilizing this software must ensure they are operating on supported versions to mitigate this risk.

References