ssa-216014
Vulnerability from csaf_siemens
Published
2025-03-11 00:00
Modified
2025-06-10 00:00
Summary
SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs
Notes
Summary
Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations.
Siemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations.\n\nSiemens has released new versions of BIOS for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-216014.html"
},
{
"category": "self",
"summary": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-216014.json"
}
],
"title": "SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs",
"tracking": {
"current_release_date": "2025-06-10T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-216014",
"initial_release_date": "2025-03-11T00:00:00Z",
"revision_history": [
{
"date": "2025-03-11T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-06-10T00:00:00Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added SIMATIC IPC RC-543A and RW-543B; Updated SIMATIC IPC3000 Smart V3, IPC 347G, IPC 527G"
}
],
"status": "interim",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC Field PG M5",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SIMATIC Field PG M5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV26.01.12",
"product": {
"name": "SIMATIC Field PG M6",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "SIMATIC Field PG M6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC127E",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC127E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC227E",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC227E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC227G",
"product_id": "5"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC227G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC277E",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC277E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC277G",
"product_id": "7"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC277G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC327G",
"product_id": "8"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC327G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC347G",
"product_id": "9"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC347G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC377G",
"product_id": "10"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC377G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC427E",
"product_id": "11"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC427E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC477E",
"product_id": "12"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC477E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC477E PRO",
"product_id": "13"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC477E PRO"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC527G",
"product_id": "14"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC527G"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV25.02.15",
"product": {
"name": "SIMATIC IPC627E",
"product_id": "15"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC627E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV25.02.15",
"product": {
"name": "SIMATIC IPC647E",
"product_id": "16"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC647E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV25.02.15",
"product": {
"name": "SIMATIC IPC677E",
"product_id": "17"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC677E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV25.02.15",
"product": {
"name": "SIMATIC IPC847E",
"product_id": "18"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC847E"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC3000 SMART V3",
"product_id": "19"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC3000 SMART V3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV31.01.07",
"product": {
"name": "SIMATIC IPC BX-21A",
"product_id": "20"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC BX-21A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV29.01.07",
"product": {
"name": "SIMATIC IPC BX-32A",
"product_id": "21"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC BX-32A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV29.01.07",
"product": {
"name": "SIMATIC IPC BX-39A",
"product_id": "22"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC BX-39A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV32.01.04",
"product": {
"name": "SIMATIC IPC BX-59A",
"product_id": "23"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC BX-59A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV29.01.07",
"product": {
"name": "SIMATIC IPC PX-32A",
"product_id": "24"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC PX-32A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV29.01.07",
"product": {
"name": "SIMATIC IPC PX-39A",
"product_id": "25"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC PX-39A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV29.01.07",
"product": {
"name": "SIMATIC IPC PX-39A PRO",
"product_id": "26"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC PX-39A PRO"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC RC-543A",
"product_id": "27"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC RC-543A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC RC-543B",
"product_id": "28"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC RC-543B"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC RW-543A",
"product_id": "29"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC RW-543A"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC IPC RW-543B",
"product_id": "30"
}
}
],
"category": "product_name",
"name": "SIMATIC IPC RW-543B"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC ITP1000",
"product_id": "31"
}
}
],
"category": "product_name",
"name": "SIMATIC ITP1000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC\u00a0IPC277G PRO",
"product_id": "32"
}
}
],
"category": "product_name",
"name": "SIMATIC\u00a0IPC277G PRO"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-56181",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "summary",
"text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to root/administrator permission for the operating system",
"product_ids": [
"1",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
{
"category": "no_fix_planned",
"details": "Currently no fix is planned",
"product_ids": [
"4",
"6",
"9",
"14",
"19"
]
},
{
"category": "none_available",
"details": "Currently no fix is available",
"product_ids": [
"1",
"3",
"5",
"7",
"8",
"10",
"11",
"12",
"13",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
{
"category": "vendor_fix",
"details": "Update to V25.02.15 or later version",
"product_ids": [
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V29.01.07 or later version",
"product_ids": [
"21",
"24"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V29.01.07 or later version",
"product_ids": [
"22",
"25",
"26"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V31.01.07 or later version",
"product_ids": [
"20"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V32.01.04 or later version",
"product_ids": [
"23"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
}
],
"title": "CVE-2024-56181"
},
{
"cve": "CVE-2024-56182",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "summary",
"text": "The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to root/administrator permission for the operating system",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
{
"category": "no_fix_planned",
"details": "Currently no fix is planned",
"product_ids": [
"4",
"6",
"9",
"14",
"19"
]
},
{
"category": "none_available",
"details": "Currently no fix is available",
"product_ids": [
"1",
"3",
"5",
"7",
"8",
"10",
"11",
"12",
"13",
"27",
"28",
"29",
"30",
"31",
"32"
]
},
{
"category": "vendor_fix",
"details": "Update to V25.02.15 or later version",
"product_ids": [
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V26.01.12 or later version",
"product_ids": [
"2"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V29.01.07 or later version",
"product_ids": [
"21",
"24"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V29.01.07 or later version",
"product_ids": [
"22",
"25",
"26"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V31.01.07 or later version",
"product_ids": [
"20"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
},
{
"category": "vendor_fix",
"details": "Update to V32.01.04 or later version",
"product_ids": [
"23"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32"
]
}
],
"title": "CVE-2024-56182"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…