Vulnetix
Try Vulnetix Request Demo
ICSA-23-103-01 PUBLISHED CVSS 6.199999809265137 MEDIUM

The Adaptec Maxview application shipped with affected SIMATIC IPCs contains a hard coded, non-unique certificate to secure HTTPS connections between the browser and the local Maxview configuration application. A local attacker may use this key to decrypt intercepted local traffic between the browser and the application and could perform a man-in-the-middle attack in order to modify data in transit. Adaptec has released updates for the affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.

Risk Scores

CVSS v3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

Affected Products

VendorProductVersions
SIMATIC IPC1047E
SIMATIC IPC1047
SIMATIC IPC647E
SIMATIC IPC847D
SIMATIC IPC847E
SIMATIC IPC647D

Timeline

References

Open in Interactive Console →