Skip to content
OpenAdvisories
High SSA-216014 2 CVEs

SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs

Published Mar 11, 2025 · Updated Sep 8, 2026 · Revision 7

Vendor: Siemens Product: SIMATIC Field PG M5 Product: SIMATIC Field PG M6 Product: SIMATIC IPC BX-21A Product: SIMATIC IPC BX-32A Product: SIMATIC IPC BX-39A Product: SIMATIC IPC BX-59A Product: SIMATIC IPC PX-32A Product: SIMATIC IPC PX-39A Product: SIMATIC IPC PX-39A PRO Product: SIMATIC IPC RC-543A Product: SIMATIC IPC RC-543B Product: SIMATIC IPC RW-543A Product: SIMATIC IPC RW-543B Product: SIMATIC IPC127E Product: SIMATIC IPC227E Product: SIMATIC IPC227G Product: SIMATIC IPC277E Product: SIMATIC IPC277G Product: SIMATIC IPC277G PRO Product: SIMATIC IPC3000 SMART V3 Product: SIMATIC IPC327G Product: SIMATIC IPC347G Product: SIMATIC IPC377G Product: SIMATIC IPC427E Product: SIMATIC IPC477E Product: SIMATIC IPC477E PRO Product: SIMATIC IPC527G Product: SIMATIC IPC627E Product: SIMATIC IPC647E +3 more

Summary

Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations.

Siemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #7

    Added fix for SIMATIC IPC427E / IPC477E / IPC477E PRO; Updated the remediation for SIMATIC ITP1000 and M5 to 'No fix planned'

  2. #6

    Added fix versions for IPC RC-543A

  3. #5

    Added fix versions for IPC RW-543A and IPC127E

  4. #4

    Added fix versions for IPC RW-543B and IPC RC-543B

  5. #3

    Added fix for SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G

  6. #2

    Added SIMATIC IPC RC-543A and RW-543B; Updated SIMATIC IPC3000 Smart V3, IPC 347G, IPC 527G

  7. #1

    Publication Date

References