Lucene search

[email protected]CVE-2023-51438

HistoryJan 09, 2024 - 10:15 a.m.

CVE-2023-51438

2024-01-0910:15:21

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-51438

simatic

ipc1047e

ipc647e

ipc847e

maxview storage manager

windows

redfish

unauthorized access

nvd

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC847E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows). In default installations of maxView Storage Manager where Redfish® server is configured for remote system management, a vulnerability has been identified that can provide unauthorized access.

Affected configurations

NVD

Node

microchipmaxview_storage_managerRange<4.14.00.26068windows

AND

siemenssimatic_ipc1047eMatch-

siemenssimatic_ipc647eMatch-

siemenssimatic_ipc847eMatch-

CPENameOperatorVersion
microchip:maxview_storage_managermicrochip maxview storage managerlt4.14.00.26068

CPE	Name	Operator	Version
microchip:maxview_storage_manager	microchip maxview storage manager	lt	4.14.00.26068

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC1047E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < V4.14.00.26068 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC647E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < V4.14.00.26068 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC IPC847E",
    "versions": [
      {
        "version": "All versions with maxView Storage Manager < V4.14.00.26068 on Windows",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]