CVE-2024-32742

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem.

CVSS v3.1 Score

7.6

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1326 CWE-1326

Affected Products

Vendor	Product	Versions
siemens	simatic_cn_4100_firmware	< 3.0
siemens	simatic_cn_4100	All

References

Advisories & Patches

https://cert-portal.siemens.com/productcert/html/ssa-273900.html https://cert-portal.siemens.com/productcert/html/ssa-273900.html

Frequently Asked Questions

What is CVE-2024-32742? +

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem. It has a CVSS v3.1 base score of 7.6 (HIGH).

How severe is CVE-2024-32742? +

CVE-2024-32742 has a CVSS v3.1 score of 7.6 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-32742? +

CVE-2024-32742 affects products from siemens, specifically: simatic_cn_4100, simatic_cn_4100_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-32742? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-34503

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access …

CVE-2025-34502

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic …

CVE-2024-8357 7.8

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers …

CVE-2025-2762 7.8

CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected …

CVE-2025-5834 7.8

Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass …

CVE-2025-31929 4.2

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter …