Skip to content
OpenAdvisories
High ICSA-25-072-11 2 CVEs

Siemens SIMATIC IPC Family, ITP1000, and Field PGs

Published Mar 11, 2025 · Updated Sep 15, 2026 · Revision 11

Vendor: Siemens Product: SIMATIC Field PG M5 Product: SIMATIC Field PG M6 Product: SIMATIC IPC BX-21A Product: SIMATIC IPC BX-32A Product: SIMATIC IPC BX-39A Product: SIMATIC IPC BX-59A Product: SIMATIC IPC PX-32A Product: SIMATIC IPC PX-39A Product: SIMATIC IPC PX-39A PRO Product: SIMATIC IPC RC-543A Product: SIMATIC IPC RC-543B Product: SIMATIC IPC RW-543A Product: SIMATIC IPC RW-543B Product: SIMATIC IPC127E Product: SIMATIC IPC227E Product: SIMATIC IPC227G Product: SIMATIC IPC277E Product: SIMATIC IPC277G Product: SIMATIC IPC277G PRO Product: SIMATIC IPC3000 SMART V3 Product: SIMATIC IPC327G Product: SIMATIC IPC347G Product: SIMATIC IPC377G Product: SIMATIC IPC427E Product: SIMATIC IPC477E Product: SIMATIC IPC477E PRO Product: SIMATIC IPC527G Product: SIMATIC IPC627E Product: SIMATIC IPC647E +3 more

Summary

Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations.

Siemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #11

    CISA Republication update based on Siemens ProductCERT SSA-216014 advisory

  2. #10

    Added fix for SIMATIC IPC427E / IPC477E / IPC477E PRO; Updated the remediation for SIMATIC ITP1000 and M5 to 'No fix planned'

  3. #9

    CISA Republication update based on Siemens ProductCERT SSA-216014 advisory

  4. #8

    Added fix versions for IPC RC-543A

  5. #7

    CISA Republication update based on Siemens ProductCERT SSA-216014 advisory

  6. #6

    Added fix versions for IPC RW-543A and IPC127E

  7. #5

    CISA Republication update based on Siemens ProductCERT SSA-216014 advisory

  8. #4

    Added fix versions for IPC RW-543B and IPC RC-543B

  9. #3

    Added fix for SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G

  10. #2

    Added SIMATIC IPC RC-543A and RW-543B; Updated SIMATIC IPC3000 Smart V3, IPC 347G, IPC 527G

  11. #1

    Publication Date

References