Siemens SIMATIC
Advisory ansehen veröffentlicht 2024-01-09
MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access. Microchip has released new versions for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-51438US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - CSAF Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - HTML Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - PDF Versionself
- SSA-702935: Redfish Server Vulnerability in maxView Storage Manager - TXT Versionself
- ICS Advisory ICSA-24-011-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-011-10 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (3)
- BehobenSIMATIC IPC1047E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/ - BehobenSIMATIC IPC647E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/ - BehobenSIMATIC IPC847E
Update maxView Storage Manager to V4.14.00.26068 or later version
https://storage.microsemi.com/en-us/support/raid/sas_raid/asr-3151-4i/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan