CVE-2024-32741: Hardcoded credentials in SIMATIC CN 4100 devices allow unauthorized root access. This vulnerability exposes devices to complete compromise if attackers crack the password hash. The affected devices utilize hardcoded passwords for the privileged system user root and the boot loader GRUB. Although the CVSS score is 0, indicating a less immediately exploitable issue, the presence of hardcoded credentials is a significant security risk. An attacker exploiting this flaw could gain full control of the device, potentially leading to data breaches, system manipulation, or denial of service. While the current SOCRadar Vulnerability Risk Score (SVRS) is 30, the fact that this vulnerability relates to hardcoded credentials and provides root access means it requires monitoring. Organizations using SIMATIC CN 4100 should immediately update to V3.0 or later and take steps to mitigate the risk by changing the default passwords. This vulnerability falls under CWE-259, indicating the use of hard-coded passwords.