CVE-2023-51438

In default installations of maxView Storage Manager, the Redfish server is configured for remote system management. Due to improper input validation (CWE-20), the authentication or access control mechanism of the Redfish interface can be bypassed, allowing an unauthorized attacker to gain access over the network without needing to possess any credentials. The attack requires no user interaction or special privileges, and its scope covers components outside the directly vulnerable system (Scope: Changed).

An attacker can gain full, unauthorized access to the storage management system, which may lead to disclosure of sensitive data, modification of configuration, or disruption of system availability (complete breach of confidentiality, integrity, and availability).

Update maxView Storage Manager to version V4.14.00.26068 or later. Detailed information and patches are available in the Siemens security bulletin SSA-702935 at: https://cert-portal.siemens.com/productcert/pdf/ssa-702935.pdf. Until the update is deployed, it is recommended to restrict network access to the Redfish interface using a firewall or network segmentation.

Siemens SIMATIC IPC1047E, SIMATIC IPC647E, and SIMATIC IPC847E — all versions with Microchip maxView Storage Manager version earlier than V4.14.00.26068 installed on Windows, in default configuration with Redfish server enabled