Siemens SIMATIC IPC RS-828A
Advisory ansehen veröffentlicht 2025-05-13
SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller (BMC) that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability of the BMC and thus the entire system. Siemens has released a new version for SIMATIC IPC RS-828A - BMC firmware and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54085US | critical9.8OT kritisch | KEV | ||
AMI’s SPx contains
a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation
of this vulnerabili… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-446307: Authentication Bypass Vulnerability in BMC (CVE-2024-54085) affects SIMATIC IPC RS-828A - CSAF Versionself
- SSA-446307: Authentication Bypass Vulnerability in BMC (CVE-2024-54085) affects SIMATIC IPC RS-828A - HTML Versionself
- ICS Advisory ICSA-25-135-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-135-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSIMATIC IPC RS-828A - BMC firmware
Update to V1.1.13 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan