PT-2024-1007
CVE-2023-51438
·
تاريخ النشر
2024-01-09
·
تاريخ التحديث
2024-01-17
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SIMATIC IPC1047E versions with maxView Storage Manager prior to V4.14.00.26068
SIMATIC IPC647E versions with maxView Storage Manager prior to V4.14.00.26068
SIMATIC IPC847E versions with maxView Storage Manager prior to V4.14.00.26068
Description
A vulnerability has been identified in the maxView Storage Manager of SIMATIC IPC devices, which can provide unauthorized access when the Redfish server is configured for remote system management. The issue is related to errors in processing input data, allowing a remote attacker to gain full unauthorized access to the device.
Recommendations
For SIMATIC IPC1047E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later.
For SIMATIC IPC647E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later.
For SIMATIC IPC847E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later.
As a temporary workaround, consider disabling the Redfish server for remote system management until the maxView Storage Manager is updated.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾