High SSA-159454 1 CVE

SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs

Published Oct 13, 2026 · Updated Oct 13, 2026

Vendor: Siemens Product: SIMATIC IPC BX-21A Product: SIMATIC IPC RW-543A Product: SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G

Summary

The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

High 7.7

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions…

Siemens SIMATIC IPC BX-21A SIMATIC IPC RW-543A SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G ICS / OT

Oct 13, 2026

Revision history

2026-10-13 #1
Publication Date

References

SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-159454.html