CVE-2023-23588

🗓️ 11 Apr 2023 09:03:01Reported by siemensType

Vulnerability in SIMATIC IPC1047, IPC1047E, IPC647D, IPC647E, IPC847D, IPC847E with non-unique TLS certificate may lead to man-in-the-middle attack

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-23588	11 Apr 202314:23	–	circl
CNNVD	Siemens SIMATIC IPC DiagMonitor 信任管理问题漏洞	11 Apr 202300:00	–	cnnvd
CNVD	Siemens SIMATIC IPC DiagMonitor Trust Management Issue Vulnerability	16 Apr 202300:00	–	cnvd
Cvelist	CVE-2023-23588	11 Apr 202309:03	–	cvelist
EUVD	EUVD-2023-27688	3 Oct 202520:07	–	euvd
ICS	Siemens Adaptec Maxview Application	11 Apr 202300:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	11 Apr 202300:00	–	ncsc
NVD	CVE-2023-23588	11 Apr 202310:15	–	nvd
Prion	Design/Logic Flaw	11 Apr 202310:15	–	prion
Positive Technologies	PT-2023-9653 · Microsemi +1 · Adaptec Maxview +4	11 Apr 202300:00	–	ptsecurity

NVD

Node

siemens simatic_ipc647d_firmware

AND

siemens simatic_ipc647dMatch-

Node

siemens simatic_ipc847d_firmware

AND

siemens simatic_ipc847dMatch-

Node

siemens simatic_ipc1047_firmware

AND

siemens simatic_ipc1047Match-

Node

microchip maxview_storage_managerRange<4.09.00.25611windows

AND

siemens simatic_ipc1047eMatch-

siemens simatic_ipc647eMatch-

siemens simatic_ipc847eMatch-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC1047",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC1047E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < 4.09.00.25611 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC647D",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC647E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < 4.09.00.25611 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC847D",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC847E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < 4.09.00.25611 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-511182.pdf

21 Nov 2024 07:46Current

6Medium risk

Vulners AI Score6

CVSS 3.16.2 - 6.3

EPSS0.0006

SSVC