Critical SSA-702935 1 CVE

SSA-702935: Redfish Server Vulnerability in maxView Storage Manager

Published Jan 9, 2024 · Updated Jan 9, 2024

Vendor: Siemens Product: SIMATIC IPC1047E Product: SIMATIC IPC647E Product: SIMATIC IPC847E

Summary

MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access.

Microchip has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Critical 10.0

CVE-2023-51438

A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on …

Siemens SIMATIC IPC647E SIMATIC IPC847E SIMATIC IPC1047E ICS / OT

Jan 9, 2024

Revision history

2024-01-09 #1
Publication Date

References

SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-702935.html
SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-702935.pdf
SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-702935.txt