USB Vulnerability Allows Attackers to Boot Another OS and Access File System

CVE-2024-32742

Summary

A significant vulnerability has been found in the SIMATIC CN 4100 produced by Siemens. The device features an unrestricted USB port, which allows an attacker with local access to leverage it for booting an alternative operating system. This exploitation grants the attacker comprehensive read/write access to the device's filesystem. The potential for unauthorized modifications and data breaches calls for immediate attention to secure devices running versions prior to V3.0.

References