{"id":"CVE-2023-29131","aliases":["EUVD-2023-32734","GHSA-3q3j-5m7x-chq6"],"status":"published","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00423,"percentile":0.36936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2023-07-11T09:07:07Z","modified":"2026-10-24T13:10:00Z","products":[{"vendor":"siemens","product":"simatic cn 4100"},{"vendor":"siemens","product":"simatic_cn_4100_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29131"},{"url":"https://github.com/advisories/GHSA-3q3j-5m7x-chq6"}],"sources":{"cve":[{"id":"CVE-2023-29131","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.","status":"published","published":"2023-07-11T09:07:07.238Z","modified":"2024-11-12T17:00:15.582Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-32734","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.","status":"published","published":"2023-07-11T09:07:07Z","modified":"2024-11-12T17:00:15Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-03T00:05:04.420026Z"}],"ghsa":[{"id":"GHSA-3q3j-5m7x-chq6","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.","status":"published","published":"2023-07-11T12:30:35Z","modified":"2024-04-04T05:55:25Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:56:37.005335Z"}],"nvd":[{"id":"CVE-2023-29131","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.","status":"published","published":"2023-07-11T10:15:10.473Z","modified":"2026-10-24T13:10:00.147Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:08:15.127597Z"}]}}