VYPR
← All advisories
Medium severity6.2NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-23588

CVE-2023-23588

Description

A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC647D (All versions), SIMATIC IPC647E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC847D (All versions), SIMATIC IPC847E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows). The Adaptec Maxview application on affected devices is using a non-unique TLS certificate across installations to protect the communication from the local browser to the local application. A local attacker may use this key to decrypt intercepted local traffic between the browser and the application and could perform a man-in-the-middle attack in order to modify data in transit.

Affected products

11
  • Siemens Foundation/Simatic Ipc647d Firmware2 versions
    cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:siemens:simatic_ipc647d_firmware:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions
  • Siemens Foundation/Simatic Ipc477d Firmware2 versions
    cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:siemens:simatic_ipc847d_firmware:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions
  • Siemens Foundation/Simatic Ipc1047 Firmware
    cpe:2.3:o:siemens:simatic_ipc1047_firmware:*:*:*:*:*:*:*:*
  • Microchip/Maxview Storage Manager
    cpe:2.3:a:microchip:maxview_storage_manager:*:*:*:*:*:windows:*:*
    Range: <4.09.00.25611
  • Siemens Foundation/SIMATIC IPC1047Ellm-fuzzy3 versions
    All versions+ 2 more
    • (no CPE)range: All versions
    • (no CPE)range: All versions
    • (no CPE)range: All versions with maxView Storage Manager < 4.09.00.25611 on Windows
  • Siemens Foundation/SIMATIC IPC647Ecpe-rescue2 versions
    All versions with maxView Storage Manager < 4.09.00.25611 on Windows+ 1 more
    • (no CPE)range: All versions with maxView Storage Manager < 4.09.00.25611 on Windows
    • (no CPE)range: All versions with maxView Storage Manager < 4.09.00.25611 on Windows

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.