CVE-2023-51438

Name of the Vulnerable Software and Affected Versions SIMATIC IPC1047E versions with maxView Storage Manager prior to V4.14.00.26068 SIMATIC IPC647E versions with maxView Storage Manager prior to V4.14.00.26068 SIMATIC IPC847E versions with maxView Storage Manager prior to V4.14.00.26068

Description A vulnerability has been identified in the maxView Storage Manager of SIMATIC IPC devices, which can provide unauthorized access when the Redfish server is configured for remote system management. The issue is related to errors in processing input data, allowing a remote attacker to gain full unauthorized access to the device.

Recommendations For SIMATIC IPC1047E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later. For SIMATIC IPC647E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later. For SIMATIC IPC847E with maxView Storage Manager prior to V4.14.00.26068, update maxView Storage Manager to version V4.14.00.26068 or later. As a temporary workaround, consider disabling the Redfish server for remote system management until the maxView Storage Manager is updated.