SSA-702935: Redfish Server Vulnerability in maxView Storage Manager
view advisory published 2024-01-09
MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access. Microchip has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-51438US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - CSAF Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - HTML Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - PDF Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - TXT Versionself
03
remediations (3)
- FixedSIMATIC IPC1047E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/ - FixedSIMATIC IPC647E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/ - FixedSIMATIC IPC847E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan