[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6pHtrAArwHHJ1F7Z_yb3vVtKA-wwCTED0Nk7Jy-KJZQ":3,"g5a-risk:CVE-2024-32742":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":46,"references":47,"referencesCount":46,"weaknesses":55,"weaknessesCount":64,"isActivelyExploited":45,"cisaInfo":26,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":105,"notableEvents":106},"CVE-2024-32742","What is CVE-2024-32742?","A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003C V3.0). The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read\u002Fwrite access to the filesystem.","A vulnerability has been identified in SIMATIC CN 4100 (All versions \u003C V3.0). The affected device contains an unrestricted USB port. An attacker with local a...","2024-05-14T16:17:12.103","2026-06-17T07:30:21.163",7.6,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","PHYSICAL","LOW","NONE","CHANGED","HIGH",null,0.9,6,[],[],[],0.00394,[32,32,32,32,32,32,32],"High",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"siemens","simatic_cn_4100_firmware","*","cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:*",{"vendor":37,"product":42,"version":43,"criteria":44,"vulnerable":45},"simatic_cn_4100","-","cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:*",false,2,[48,53],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-273900.html","Siemens",[52],"Vendor Advisory",{"url":49,"source":50,"tags":54},[52],[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-1326","Missing Immutable Root of Trust in Hardware","A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.","A System-on-Chip (SoC) implements secure boot by verifying or authenticating signed boot code. The signing of the code is achieved by an entity that the SoC trusts.  Before executing the boot code, the SoC verifies that the code or the public key with which the code has been signed has not been tampered with. The other data upon which the SoC depends are system-hardware settings in fuses such as whether \"Secure Boot is enabled\". These data play a crucial role in establishing a Root of Trust (RoT) to execute secure-boot flows.\nOne of the many ways RoT is achieved is by storing the code and data in memory or fuses. This memory should be immutable, i.e., once the RoT is programmed\u002Fprovisioned in memory, that memory should be locked and prevented from further programming or writes. If the memory contents (i.e., RoT) are mutable, then an adversary can modify the RoT to execute their choice of code, resulting in a compromised secure boot.\nNote that, for components like ROM, secure patching\u002Fupdate features should be supported to allow authenticated and authorized updates in the field.","Draft","Base","Simple",1,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2024-32742? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-32742, a high severity cyber security vulnerability from 2024. A vulnerability has been identified in SIMATIC CN 4100 (All...","CVE-2024-32742, CVE-2024-32742 vulnerability, CVE-2024-32742 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, siemens security, simatic_cn_4100_firmware vulnerability, simatic_cn_4100 vulnerability","\u002Fwhat-is\u002Fcve-2024-32742",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-32742","Cybersecurity","CVE-2024-32742, CVE-2024-32742 vulnerability, CVE-2024-32742 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":93,"Negate":26,"Nodes":94},"AND",[95,101],{"Operator":96,"Negate":45,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":100,"VersionEndIncluding":26},"F15A56BD-441A-4E61-A7D7-EADCCF8CC81B","3.0",{"Operator":96,"Negate":45,"CPEMatch":102},[103],{"Vulnerable":45,"Criteria":44,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"92619F5F-3679-4424-9455-3285FF1EF2F1",[],[],{"lastModified":11,"cacheTime":108,"version":109},1792356509554,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},46,"Medium","Plan remediation","2026-10-16T07:02:09.585399+00:00"]