SSA-216014

Vulnerability from csaf_siemens - Published: 2025-03-11 00:00 - Updated: 2026-05-12 00:00
Summary
SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs
Notes
Summary: Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations. Siemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
CVE-2024-56181
8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-693 - Protection Mechanism Failure
Affected products
Product Identifier Version Remediation
SIMATIC Field PG M5
Siemens / SIMATIC Field PG M5
 vers:all/*
Mitigation
None Available
SIMATIC IPC BX-21A
Siemens / SIMATIC IPC BX-21A
 vers:intdot/<31.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-32A
Siemens / SIMATIC IPC BX-32A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-39A
Siemens / SIMATIC IPC BX-39A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-59A
Siemens / SIMATIC IPC BX-59A
 vers:intdot/<32.01.04
Mitigation
Vendor Fix fix
SIMATIC IPC PX-32A
Siemens / SIMATIC IPC PX-32A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC PX-39A
Siemens / SIMATIC IPC PX-39A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC PX-39A PRO
Siemens / SIMATIC IPC PX-39A PRO
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC RC-543A
Siemens / SIMATIC IPC RC-543A
 vers:intdot/<36.01.03
Mitigation
Vendor Fix fix
SIMATIC IPC RC-543B
Siemens / SIMATIC IPC RC-543B
 vers:intdot/<35.01.12
Mitigation
Vendor Fix fix
SIMATIC IPC RW-543A
Siemens / SIMATIC IPC RW-543A
 vers:intdot/<1.1.4
Mitigation
Vendor Fix fix
SIMATIC IPC RW-543B
Siemens / SIMATIC IPC RW-543B
 vers:intdot/<35.02.10
Mitigation
Vendor Fix fix
SIMATIC IPC127E
Siemens / SIMATIC IPC127E
 vers:intdot/<27.01.11
Mitigation
Vendor Fix fix
SIMATIC IPC227E
Siemens / SIMATIC IPC227E
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC227G
Siemens / SIMATIC IPC227G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC277E
Siemens / SIMATIC IPC277E
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC277G
Siemens / SIMATIC IPC277G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC277G PRO
Siemens / SIMATIC IPC277G PRO
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC3000 SMART V3
Siemens / SIMATIC IPC3000 SMART V3
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC327G
Siemens / SIMATIC IPC327G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC347G
Siemens / SIMATIC IPC347G
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC377G
Siemens / SIMATIC IPC377G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC427E
Siemens / SIMATIC IPC427E
 vers:all/*
Mitigation
None Available
SIMATIC IPC477E
Siemens / SIMATIC IPC477E
 vers:all/*
Mitigation
None Available
SIMATIC IPC477E PRO
Siemens / SIMATIC IPC477E PRO
 vers:all/*
Mitigation
None Available
SIMATIC IPC527G
Siemens / SIMATIC IPC527G
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC ITP1000
Siemens / SIMATIC ITP1000
 vers:all/*
Mitigation
None Available
CVE-2024-56182
8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-693 - Protection Mechanism Failure
Affected products
Product Identifier Version Remediation
SIMATIC Field PG M5
Siemens / SIMATIC Field PG M5
 vers:all/*
Mitigation
None Available
SIMATIC Field PG M6
Siemens / SIMATIC Field PG M6
 vers:intdot/<26.01.12
Mitigation
Vendor Fix fix
SIMATIC IPC BX-21A
Siemens / SIMATIC IPC BX-21A
 vers:intdot/<31.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-32A
Siemens / SIMATIC IPC BX-32A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-39A
Siemens / SIMATIC IPC BX-39A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC BX-59A
Siemens / SIMATIC IPC BX-59A
 vers:intdot/<32.01.04
Mitigation
Vendor Fix fix
SIMATIC IPC PX-32A
Siemens / SIMATIC IPC PX-32A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC PX-39A
Siemens / SIMATIC IPC PX-39A
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC PX-39A PRO
Siemens / SIMATIC IPC PX-39A PRO
 vers:intdot/<29.01.07
Mitigation
Vendor Fix fix
SIMATIC IPC RC-543A
Siemens / SIMATIC IPC RC-543A
 vers:intdot/<36.01.03
Mitigation
Vendor Fix fix
SIMATIC IPC RC-543B
Siemens / SIMATIC IPC RC-543B
 vers:intdot/<35.01.12
Mitigation
Vendor Fix fix
SIMATIC IPC RW-543A
Siemens / SIMATIC IPC RW-543A
 vers:intdot/<1.1.4
Mitigation
Vendor Fix fix
SIMATIC IPC RW-543B
Siemens / SIMATIC IPC RW-543B
 vers:intdot/<35.02.10
Mitigation
Vendor Fix fix
SIMATIC IPC127E
Siemens / SIMATIC IPC127E
 vers:intdot/<27.01.11
Mitigation
Vendor Fix fix
SIMATIC IPC227E
Siemens / SIMATIC IPC227E
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC227G
Siemens / SIMATIC IPC227G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC277E
Siemens / SIMATIC IPC277E
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC277G
Siemens / SIMATIC IPC277G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC277G PRO
Siemens / SIMATIC IPC277G PRO
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC3000 SMART V3
Siemens / SIMATIC IPC3000 SMART V3
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC327G
Siemens / SIMATIC IPC327G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC347G
Siemens / SIMATIC IPC347G
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC377G
Siemens / SIMATIC IPC377G
 vers:intdot/<28.01.14
Mitigation
Vendor Fix fix
SIMATIC IPC427E
Siemens / SIMATIC IPC427E
 vers:all/*
Mitigation
None Available
SIMATIC IPC477E
Siemens / SIMATIC IPC477E
 vers:all/*
Mitigation
None Available
SIMATIC IPC477E PRO
Siemens / SIMATIC IPC477E PRO
 vers:all/*
Mitigation
None Available
SIMATIC IPC527G
Siemens / SIMATIC IPC527G
 vers:all/*
Mitigation
No Fix Planned
SIMATIC IPC627E
Siemens / SIMATIC IPC627E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC647E
Siemens / SIMATIC IPC647E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC677E
Siemens / SIMATIC IPC677E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC IPC847E
Siemens / SIMATIC IPC847E
 vers:intdot/<25.02.15
Mitigation
Vendor Fix fix
SIMATIC ITP1000
Siemens / SIMATIC ITP1000
 vers:all/*
Mitigation
None Available
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to  alter the secure boot and password configurations.\n\nSiemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-216014.html"
      },
      {
        "category": "self",
        "summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-216014.json"
      }
    ],
    "title": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs",
    "tracking": {
      "current_release_date": "2026-05-12T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-216014",
      "initial_release_date": "2025-03-11T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-03-11T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2025-06-10T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added SIMATIC IPC RC-543A and RW-543B; Updated SIMATIC IPC3000 Smart V3, IPC 347G, IPC 527G"
        },
        {
          "date": "2025-11-11T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fix for SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G"
        },
        {
          "date": "2026-02-10T00:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fix versions for IPC RW-543B and IPC RC-543B"
        },
        {
          "date": "2026-04-14T00:00:00.000Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Added fix versions for IPC RW-543A and IPC127E"
        },
        {
          "date": "2026-05-12T00:00:00.000Z",
          "legacy_version": "1.5",
          "number": "6",
          "summary": "Added fix versions for IPC RC-543A"
        }
      ],
      "status": "interim",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Field PG M5",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M5"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c26.01.12",
                "product": {
                  "name": "SIMATIC Field PG M6",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M6"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c31.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-21A",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-21A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-32A",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-32A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-39A",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-39A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c32.01.04",
                "product": {
                  "name": "SIMATIC IPC BX-59A",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-59A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-32A",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-32A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-39A",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-39A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-39A PRO",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-39A PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c36.01.03",
                "product": {
                  "name": "SIMATIC IPC RC-543A",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RC-543A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c35.01.12",
                "product": {
                  "name": "SIMATIC IPC RC-543B",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RC-543B"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.1.4",
                "product": {
                  "name": "SIMATIC IPC RW-543A",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RW-543A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c35.02.10",
                "product": {
                  "name": "SIMATIC IPC RW-543B",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RW-543B"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c27.01.11",
                "product": {
                  "name": "SIMATIC IPC127E",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC127E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC227E",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC227G",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC277E",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC277E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC277G",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC277G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC\u00a0IPC277G PRO",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC\u00a0IPC277G PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC3000 SMART V3",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC3000 SMART V3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC327G",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC327G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC347G",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC347G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC377G",
                  "product_id": "23"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC377G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC427E",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC427E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E",
                  "product_id": "25"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E PRO",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC527G",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC527G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC627E",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC627E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC647E",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC647E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC677E",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC677E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC847E",
                  "product_id": "31"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC847E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC ITP1000",
                  "product_id": "32"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC ITP1000"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-56181",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Restrict access to root/administrator permission for the operating system",
          "product_ids": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "15",
            "17",
            "20",
            "22",
            "27"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "1",
            "24",
            "25",
            "26",
            "32"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.1.4 or later version",
          "product_ids": [
            "12"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.15 or later version",
          "product_ids": [
            "28",
            "29",
            "30",
            "31"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.11 or later version",
          "product_ids": [
            "14"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.14 or later version",
          "product_ids": [
            "16",
            "18",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "4",
            "7"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "5",
            "8",
            "9"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V31.01.07 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V32.01.04 or later version",
          "product_ids": [
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.01.12 or later version",
          "product_ids": [
            "11"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.02.10 or later version",
          "product_ids": [
            "13"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V36.01.03 or later version",
          "product_ids": [
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "title": "CVE-2024-56181"
    },
    {
      "cve": "CVE-2024-56182",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Restrict access to root/administrator permission for the operating system",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "15",
            "17",
            "20",
            "22",
            "27"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "1",
            "24",
            "25",
            "26",
            "32"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.1.4 or later version",
          "product_ids": [
            "12"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.15 or later version",
          "product_ids": [
            "28",
            "29",
            "30",
            "31"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.12 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.11 or later version",
          "product_ids": [
            "14"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.14 or later version",
          "product_ids": [
            "16",
            "18",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "4",
            "7"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "5",
            "8",
            "9"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V31.01.07 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V32.01.04 or later version",
          "product_ids": [
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.01.12 or later version",
          "product_ids": [
            "11"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.02.10 or later version",
          "product_ids": [
            "13"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V36.01.03 or later version",
          "product_ids": [
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "title": "CVE-2024-56182"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.