Summary
SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller (BMC) that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability of the BMC and thus the entire system.
Siemens has released a new version for SIMATIC IPC RS-828A - BMC firmware and recommends to update to the latest version.
Vulnerabilities 1
-
Critical 10.0
Redfish Authentication Bypass
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
KEV Jun 25, 2025
Revision history
-
#2
Added fix for SIMATIC IPC RS-828A - BMC firmware
-
#1
Publication Date
References
-
SSA-446307: Authentication Bypass Vulnerability in BMC (CVE-2024-54085) affects SIMATIC IPC RS-828A - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-446307.html