Siemens SIMATIC CN 4100

An attacker with network access and valid (low-privilege) credentials could escalate privileges and bypass network isolation controls, potentially gaining administrative access to the device. This could allow unauthorized control of industrial processes or lateral movement into critical infrastructure networks.

Owners and operators of Siemens SIMATIC CN 4100 industrial computer systems used in manufacturing, utilities, and critical infrastructure facilities. The CN 4100 is commonly used as a human-machine interface (HMI) or control system gateway. Any organization running versions prior to V2.5 should assess if they are affected.

An attacker needs network access to the SIMATIC CN 4100 device and valid login credentials (even low-privilege ones). Once authenticated, they exploit the improper access control and insecure defaults to escalate privileges to administrative level, then use that access to bypass network isolation and move laterally into the industrial control system network or connected IT systems.