{"id":"CVE-2024-32742","aliases":["EUVD-2024-30529","GHSA-w364-mr34-496r"],"status":"published","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00394,"percentile":0.33966,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1326"],"published":"2024-05-14T10:02:49Z","modified":"2026-06-17T07:30:21Z","products":[{"vendor":"siemens","product":"simatic cn 4100"},{"vendor":"siemens","product":"simatic_cn_4100"},{"vendor":"siemens","product":"simatic_cn_4100_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-273900.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32742"},{"url":"https://github.com/advisories/GHSA-w364-mr34-496r"}],"sources":{"cve":[{"id":"CVE-2024-32742","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.","status":"published","published":"2024-05-14T10:02:49.388Z","modified":"2024-08-02T02:20:35.285Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:34:15.662528Z"}],"euvd":[{"id":"EUVD-2024-30529","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.","status":"published","published":"2024-05-14T10:02:49Z","modified":"2024-08-02T02:20:35Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-03T03:50:23.057649Z"}],"ghsa":[{"id":"GHSA-w364-mr34-496r","title":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device...","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.","status":"published","published":"2024-05-14T18:31:00Z","modified":"2024-05-14T18:31:05Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:57:21.290422Z"}],"nvd":[{"id":"CVE-2024-32742","description":"A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003c V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.","status":"published","published":"2024-05-14T16:17:12.103Z","modified":"2026-06-17T07:30:21.163Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:09:58.124007Z"}]}}