Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1

An authenticated attacker could inject commands, abuse hard-coded credentials, or bypass access controls to gain unauthorized control of the CN 4100 industrial panel computer, potentially disrupting production monitoring, data integrity, or causing loss of operational visibility.

This affects organizations running SIMATIC CN 4100 industrial panel computers, which are commonly used in manufacturing, water treatment, electric utilities, and other process industries for local HMI, data logging, and process monitoring. Any facility where the CN 4100 is used for operational visibility or control should prioritize this update.

An attacker with valid credentials (or exploiting hard-coded accounts) on the network could send crafted input containing shell commands to the CN 4100, which would be executed with the panel's privileges. This could allow the attacker to modify system configuration, access sensitive process data, or disrupt the device's ability to monitor and control industrial processes.