A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device.
| Software | From | Fixed in |
|---|---|---|
| siemens / simatic_cn_4100_firmware | - | 3.0 |