{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to  alter the secure boot and password configurations.\n\nSiemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-216014.html"
      },
      {
        "category": "self",
        "summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-216014.json"
      }
    ],
    "title": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs",
    "tracking": {
      "current_release_date": "2026-02-10T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-216014",
      "initial_release_date": "2025-03-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-03-11T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2025-06-10T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added SIMATIC IPC RC-543A and RW-543B; Updated SIMATIC IPC3000 Smart V3, IPC 347G, IPC 527G"
        },
        {
          "date": "2025-11-11T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fix for SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G"
        },
        {
          "date": "2026-02-10T00:00:00Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fix versions for IPC RW-543B and IPC RC-543B"
        }
      ],
      "status": "interim",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Field PG M5",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M5"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c26.01.12",
                "product": {
                  "name": "SIMATIC Field PG M6",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M6"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c31.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-21A",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-21A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-32A",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-32A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC BX-39A",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-39A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c32.01.04",
                "product": {
                  "name": "SIMATIC IPC BX-59A",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-59A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-32A",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-32A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-39A",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-39A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c29.01.07",
                "product": {
                  "name": "SIMATIC IPC PX-39A PRO",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC PX-39A PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC RC-543A",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RC-543A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c35.01.12",
                "product": {
                  "name": "SIMATIC IPC RC-543B",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RC-543B"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC RW-543A",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RW-543A"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c35.02.10",
                "product": {
                  "name": "SIMATIC IPC RW-543B",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC RW-543B"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC127E",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC127E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC227E",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC227G",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC277E",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC277E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC277G",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC277G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC\u00a0IPC277G PRO",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC\u00a0IPC277G PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC3000 SMART V3",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC3000 SMART V3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC327G",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC327G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC347G",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC347G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.14",
                "product": {
                  "name": "SIMATIC IPC377G",
                  "product_id": "23"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC377G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC427E",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC427E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E",
                  "product_id": "25"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E PRO",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC527G",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC527G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC627E",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC627E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC647E",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC647E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC677E",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC677E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.15",
                "product": {
                  "name": "SIMATIC IPC847E",
                  "product_id": "31"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC847E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC ITP1000",
                  "product_id": "32"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC ITP1000"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-56181",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Restrict access to root/administrator permission for the operating system",
          "product_ids": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "15",
            "17",
            "20",
            "22",
            "27"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "1",
            "10",
            "12",
            "14",
            "24",
            "25",
            "26",
            "32"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.15 or later version",
          "product_ids": [
            "28",
            "29",
            "30",
            "31"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.14 or later version",
          "product_ids": [
            "16",
            "18",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "4",
            "7"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "5",
            "8",
            "9"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V31.01.07 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V32.01.04 or later version",
          "product_ids": [
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.01.12 or later version",
          "product_ids": [
            "11"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.02.10 or later version",
          "product_ids": [
            "13"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "title": "CVE-2024-56181"
    },
    {
      "cve": "CVE-2024-56182",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Restrict access to root/administrator permission for the operating system",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "15",
            "17",
            "20",
            "22",
            "27"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "1",
            "10",
            "12",
            "14",
            "24",
            "25",
            "26",
            "32"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.15 or later version",
          "product_ids": [
            "28",
            "29",
            "30",
            "31"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.12 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.14 or later version",
          "product_ids": [
            "16",
            "18",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "4",
            "7"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V29.01.07 or later version",
          "product_ids": [
            "5",
            "8",
            "9"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V31.01.07 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V32.01.04 or later version",
          "product_ids": [
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.01.12 or later version",
          "product_ids": [
            "11"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V35.02.10 or later version",
          "product_ids": [
            "13"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32"
          ]
        }
      ],
      "title": "CVE-2024-56182"
    }
  ]
}