{"id":"CVE-2024-32740","aliases":["EUVD-2024-30527","GHSA-9j9j-j88x-9vc6"],"status":"published","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device\r\nlocally or over the network.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00703,"percentile":0.53715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2024-05-14T10:02:47Z","modified":"2026-06-17T07:30:20Z","products":[{"vendor":"siemens","product":"simatic cn 4100"},{"vendor":"siemens","product":"simatic_cn_4100"},{"vendor":"siemens","product":"simatic_cn_4100_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-273900.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32740"},{"url":"https://github.com/advisories/GHSA-9j9j-j88x-9vc6"}],"sources":{"cve":[{"id":"CVE-2024-32740","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device\r\nlocally or over the network.","status":"published","published":"2024-05-14T10:02:47.049Z","modified":"2024-08-02T02:20:35.369Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:34:15.662528Z"}],"euvd":[{"id":"EUVD-2024-30527","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device\r\nlocally or over the network.","status":"published","published":"2024-05-14T10:02:47Z","modified":"2024-08-02T02:20:35Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"critical"}],"updated_at":"2026-11-03T03:50:23.057649Z"}],"ghsa":[{"id":"GHSA-9j9j-j88x-9vc6","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device\nlocally or over the network.","status":"published","published":"2024-05-14T18:31:00Z","modified":"2024-05-14T18:31:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:57:21.290422Z"}],"nvd":[{"id":"CVE-2024-32740","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device\r\nlocally or over the network.","status":"published","published":"2024-05-14T16:17:11.197Z","modified":"2026-06-17T07:30:20.943Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:09:58.124007Z"}]}}