SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs
Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations. Siemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-56182US | — | — | ||
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IP… | ||||
| CVE-2024-56181US | — | — | ||
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC… | ||||
references
External citations — patches, advisories, analysis.
remediations (126)
- MitigationSIMATIC Field PG M5
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC Field PG M5
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC Field PG M6
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-21A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-21A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-32A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-32A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-39A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-39A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-59A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC BX-59A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-32A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-32A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-39A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-39A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-39A PRO
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC PX-39A PRO
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RC-543A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RC-543A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RC-543B
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RC-543B
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RW-543A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RW-543A
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RW-543B
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC RW-543B
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC127E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC127E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC227E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC227E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC227G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC227G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC3000 SMART V3
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC3000 SMART V3
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC327G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC327G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC347G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC347G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC377G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC377G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC427E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC427E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC477E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC477E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC477E Pro
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC477E Pro
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC527G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC527G
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC627E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC627E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC647E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC647E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC677E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC677E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC847E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC847E
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC ITP1000
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC ITP1000
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277G PRO
Restrict access to root/administrator permission for the operating system
- MitigationSIMATIC IPC277G PRO
Restrict access to root/administrator permission for the operating system
- No fix plannedSIMATIC Field PG M5
Currently no fix is planned
- No fix plannedSIMATIC Field PG M5
Currently no fix is planned
- No fix plannedSIMATIC IPC227E
Currently no fix is planned
- No fix plannedSIMATIC IPC227E
Currently no fix is planned
- No fix plannedSIMATIC IPC277E
Currently no fix is planned
- No fix plannedSIMATIC IPC277E
Currently no fix is planned
- No fix plannedSIMATIC IPC3000 SMART V3
Currently no fix is planned
- No fix plannedSIMATIC IPC3000 SMART V3
Currently no fix is planned
- No fix plannedSIMATIC IPC347G
Currently no fix is planned
- No fix plannedSIMATIC IPC347G
Currently no fix is planned
- No fix plannedSIMATIC IPC527G
Currently no fix is planned
- No fix plannedSIMATIC IPC527G
Currently no fix is planned
- No fix plannedSIMATIC ITP1000
Currently no fix is planned
- No fix plannedSIMATIC ITP1000
Currently no fix is planned
- FixedSIMATIC Field PG M6
Update to V26.01.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-21A
Update to V31.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-21A
Update to V31.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-32A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-32A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-39A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-39A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-59A
Update to V32.01.04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC BX-59A
Update to V32.01.04 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-32A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-32A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A PRO
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC PX-39A PRO
Update to V29.01.07 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RC-543A
Update to V36.01.03 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RC-543A
Update to V36.01.03 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RC-543B
Update to V35.01.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RC-543B
Update to V35.01.12 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-543A
Update to V1.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-543A
Update to V1.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-543B
Update to V35.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC RW-543B
Update to V35.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC127E
Update to V27.01.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC127E
Update to V27.01.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC227G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC227G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC277G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC277G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC327G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC327G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC377G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC377G
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC427E
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC427E
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E Pro
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC477E Pro
Update to V21.01.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC627E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC627E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC647E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC647E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC677E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC677E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC847E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC847E
Update to V25.02.15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC277G PRO
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/ - FixedSIMATIC IPC277G PRO
Update to V28.01.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan