Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Cn 4100 (0bf10ec4-93e9-55b0-9776-f6a2e1c19a76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40941 not_vulnerable 2026-06-08 07:25:06.347289 Details available
MEDIUM (4.3)
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.
Published: 2025-12-09T10:44:40.075Z
Updated: 2025-12-09T15:13:03.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40940 not_vulnerable 2026-06-08 07:25:06.346806 Details available
MEDIUM (4.9)
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.
Published: 2025-12-09T10:44:39.009Z
Updated: 2025-12-09T15:18:54.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40939 not_vulnerable 2026-06-08 07:25:06.346242 Details available
MEDIUM (4.6)
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow an attacker with physical access to the device to trigger reboot that could cause denial of service condition.
Published: 2025-12-09T10:44:37.963Z
Updated: 2025-12-09T15:26:06.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40938 not_vulnerable 2026-06-08 07:25:06.345927 Details available
HIGH (8.1)
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability.
Published: 2025-12-09T10:44:36.883Z
Updated: 2025-12-09T16:15:21.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40937 not_vulnerable 2026-06-08 07:25:06.345258 Details available
HIGH (8.3)
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.
Published: 2025-12-09T10:44:35.795Z
Updated: 2025-12-09T15:33:38.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40593 not_vulnerable 2026-06-08 07:25:05.142138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32742 not_vulnerable 2026-06-08 06:37:23.761026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32741 not_vulnerable 2026-06-08 06:37:23.760648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32740 not_vulnerable 2026-06-08 06:37:23.759947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49621 not_vulnerable 2026-06-08 06:14:29.262760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49252 not_vulnerable 2026-06-08 06:14:28.890015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49251 not_vulnerable 2026-06-08 06:14:28.889415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.