1. Home
  2. CVE Database
  3. CVE-2023-51438
CRITICAL · 10.0

CVE-2023-51438

A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.2...

Vulnerability Description

A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC847E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows). In default installations of maxView Storage Manager where Redfish® server is configured for remote system management, a vulnerability has been identified that can provide unauthorized access.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MicrochipMaxview Storage Manager< 4.14.00.26068
SiemensSimatic Ipc1047E-
SiemensSimatic Ipc647E-
SiemensSimatic Ipc847E-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2023-51438?

CVE-2023-51438 is a vulnerability with a CVSS score of 10.0 (CRITICAL). A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC647E (All versions with maxView Storage Manager < V4.14.00.2...

How severe is CVE-2023-51438?

CVE-2023-51438 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-51438?

Check the references section above for vendor advisories and patch information. Affected products include: Microchip Maxview Storage Manager, Siemens Simatic Ipc1047E, Siemens Simatic Ipc647E, Siemens Simatic Ipc847E.