Cyber Resilience

CVE-2024-32742

High

Published: 14 May 2024

Published
14 May 2024
Modified
20 August 2025
KEV Added
—
Patch
—
CVSS Score v3.1 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0014 33.3th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-32742 is a high-severity Missing Immutable Root of Trust in Hardware (CWE-1326) vulnerability in Siemens Simatic Cn 4100 Firmware. Its CVSS base score is 7.6 (High).

Operationally, ranked at the 33.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and…

more

gain complete read/write access to the filesystem.

CWE(s)
CWE-1326

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

siemens
simatic cn 4100 firmware
≤ 3.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References