Siemens SIMATIC CN 4100 SNMP Vulnerability Allowing Access to Sensitive Data

A vulnerability exists in Siemens SIMATIC CN 4100, all versions prior to 4.0.1, due to inconsistent Simple Network Management Protocol (SNMP) behavior. The application demonstrates unexpected service availability and unreliable configuration management across different protocol versions. This inconsistency could enable an attacker to access sensitive information, potentially compromising confidentiality.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, with a risk of breaching confidentiality.

Remediation

Users are advised to update to version 4.0.1 or later. Additional information can be found on the Siemens Support page.