CVE-2023-29131 Misconfiguration in SIMATIC CN 4100

Q: Is CVE-2023-29131 being exploited?

There is no known exploitation of CVE-2023-29131 in the wild and no public exploit code.

Q: How do I fix CVE-2023-29131?

No fix has been published for CVE-2023-29131 yet. Limit exposure of the affected software until one is available.

High 7.4 Published 11 Jul 2023 Updated 12 Nov 2024

An attacker can bypass network isolation on SIMATIC CN 4100 devices due to an incorrect default SSH configuration value.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-29131?

CVE-2023-29131 is a high-severity vulnerability in Siemens SIMATIC CN 4100, published on 11 Jul 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.

Weakness: CWE-276

Which versions are affected by CVE-2023-29131?

It affects 1 product.

Products include Siemens Simatic Cn 4100 Firmware.

How do I fix CVE-2023-29131?

No fix has been published for CVE-2023-29131 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-29131 being exploited?

There is no known exploitation of CVE-2023-29131 in the wild and no public exploit code.

Sources

Also known as GHSA-3q3j-5m7x-chq6.