ICS Advisory: Siemens SIMATIC

Here is a summary of the provided document:

Summary:

As of January 10, 2023, CISA will no longer update ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. The CISA Advisory CSAF provides information on a vulnerability in Siemens' SIMATIC products with maxView Storage Manager on Windows, which can allow an attacker to obtain remote unauthorized access. The vulnerability, identified as CVE-2023-51438, has a CVSS v3 base score of 10.0. Siemens has provided specific workarounds and mitigations to reduce risk, including updates to maxView Storage Manager and network access restrictions. CISA recommends organizations perform proper impact analysis and risk assessment prior to deploying defensive measures and implement recommended cybersecurity strategies for proactive defense of ICS assets. No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.