Description
A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC847E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows). In default installations of maxView Storage Manager where Redfish® server is configured for remote system management, a vulnerability has been identified that can provide unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC IPC1047E | All versions with maxView Storage Manager < V4.14.00.26068 on Windows | — |
| Siemens | SIMATIC IPC647E | All versions with maxView Storage Manager < V4.14.00.26068 on Windows | — |
| Siemens | SIMATIC IPC847E | All versions with maxView Storage Manager < V4.14.00.26068 on Windows | — |
Advisories 2
- ICSA-24-011-10 Siemens SIMATIC CISA ICS & IT advisories · Jan 9, 2024
- SSA-702935 SSA-702935: Redfish Server Vulnerability in maxView Storage Manager Siemens ProductCERT · Jan 9, 2024