CVE-2024-22216

EPSS 0.4%
Veröffentlicht 08.01.2024 07:15:11
Zuletzt bearbeitet 18.06.2025 17:15:27
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 (except for the patched versions 3.07.23980 and 4.07.00.25339).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microchip ≫ Maxview Storage Manager SwPlatform- Version >= 3.00.23484 <= 4.14.00.26064

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.4%	0.599

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.microchip.com/en-us/solutions/embedded-security/how-to-report-potential-product-security-vulnerabilities/maxview-storage-manager-redfish-server-vulnerability

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-22216

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-22216

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-22216

EUVD