NewsSiemens ProductCERT

SSA-446307 V1.0: Authentication Bypass Vulnerability in BMC (CVE-2024-54085) affects SIMATIC IPC RS-828A

SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller (BMC) that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability of the BMC and thus the entire system. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

CVE-2024-54085AMIs SPx enthält eine Schwachstelle im BMC, bei der ein Angreifer die Authentifizierung über das Redfish Host Interface aus der Ferne umgehen kann.
CVE-2024-54085AMI MegaRAC SPx: MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
CVE-2024-54085AMI MegaRAC SPx — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Affected vendors and products

AMI AMI MegaRAC_SPx
AMI AMI MegaRAC_SPx
NetApp H300s Firmware
NetApp H410c Firmware
NetApp H410s Firmware
NetApp H500s Firmware
NetApp H700s Firmware

Source: https://cert-portal.siemens.com/productcert/html/ssa-446307.html

Linked advisories

Affected vendors and products