Skip to content
OpenAdvisories
High SSA-686975 1 CVE

SSA-686975: IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Published Feb 14, 2023 · Updated Aug 11, 2026 · Revision 8

Vendor: Siemens Product: SIMATIC Field PG M5 Product: SIMATIC Field PG M6 Product: SIMATIC IPC BX-39A Product: SIMATIC IPC PX-39A Product: SIMATIC IPC PX-39A PRO Product: SIMATIC IPC427E Product: SIMATIC IPC477E Product: SIMATIC IPC477E PRO Product: SIMATIC IPC627E Product: SIMATIC IPC647E Product: SIMATIC IPC677E Product: SIMATIC IPC847E Product: SIMATIC ITP1000 Product: SIPLUS IPC427E

Summary

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update ("2022.3 IPU – BIOS Advisory" Intel-SA-00688).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 7.9
    CVE-2022-21198

    Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user …

Revision history

  1. #8

    Added no fix planned for SIMATIC ITP1000

  2. #7

    Added fix for SIMATIC IPC427E / IPC477E / IPC477E PRO

  3. #6

    Added fix for SIMATIC Field PG M6

  4. #5

    Added fix for SIMATIC IPC627E / IPC647E / IPC677E / IPC847E

  5. #4

    Added fix for SIMATIC IPC BX-39A, SIMATIC IPC PX-39A, and SIMATIC IPC PX-39A pro

  6. #3

    Added fix for SIMATIC Field PG M5

  7. #2

    Added affected products SIMATIC IPC PX-39A and SIMATIC IPC PX-39A pro

  8. #1

    Publication Date

References