Vulnerability Description
In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 (except for the patched versions 3.07.23980 and 4.07.00.25339).
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microchip | Maxview Storage Manager | >= 3.00.23484, <= 4.14.00.26064 |
Related Weaknesses (CWE)
References
- https://www.microchip.com/en-us/solutions/embedded-security/how-to-report-potentVendor Advisory
- https://www.microchip.com/en-us/solutions/embedded-security/how-to-report-potentVendor Advisory
FAQ
What is CVE-2024-22216?
CVE-2024-22216 is a vulnerability with a CVSS score of 10.0 (CRITICAL). In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, wi...
How severe is CVE-2024-22216?
CVE-2024-22216 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-22216?
Check the references section above for vendor advisories and patch information. Affected products include: Microchip Maxview Storage Manager.