Skip to content
Fencer Vulns
high 8.2

CVE-2024-56181 json

A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32…

published 2025-03-11 19 mo ago modified 2026-09-08 2 mo ago also EUVD-2024-54268

cvss
8.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 11%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions < V21.01.21), SIMATIC IPC477E (All versions < V21.01.21), SIMATIC IPC477E PRO (All versions < V21.01.21), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.

Patch / fix

  • Siemens SIMATIC IPC BX-21A V31.01.07
  • Siemens SIMATIC IPC BX-32A V29.01.07
  • Siemens SIMATIC IPC BX-39A V29.01.07
  • Siemens SIMATIC IPC BX-59A V32.01.04
  • Siemens SIMATIC IPC PX-32A V29.01.07
  • Siemens SIMATIC IPC PX-39A V29.01.07
  • Siemens SIMATIC IPC PX-39A PRO V29.01.07
  • Siemens SIMATIC IPC RC-543A V36.01.03
  • Siemens SIMATIC IPC RC-543B V35.01.12
  • Siemens SIMATIC IPC RW-543A V1.1.4
  • Siemens SIMATIC IPC RW-543B V35.02.10
  • Siemens SIMATIC IPC127E V27.01.11
  • Siemens SIMATIC IPC227G V28.01.14
  • Siemens SIMATIC IPC277G V28.01.14
  • Siemens SIMATIC IPC277G PRO V28.01.14
  • Siemens SIMATIC IPC327G V28.01.14
  • Siemens SIMATIC IPC377G V28.01.14
  • Siemens SIMATIC IPC427E V21.01.21
  • Siemens SIMATIC IPC477E V21.01.21
  • Siemens SIMATIC IPC477E PRO V21.01.21
  • Siemens SIMATIC IPC627E V25.02.15
  • Siemens SIMATIC IPC647E V25.02.15
  • Siemens SIMATIC IPC677E V25.02.15
  • Siemens SIMATIC IPC847E V25.02.15

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-072-11 updated cvss 8.2

Siemens SIMATIC IPC Family, ITP1000, and Field PGs

show 12 more
  • Siemens SIMATIC IPC RW-543B < 35.02.10
    affected: fixed in V35.02.10, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC127E < 27.01.11
    affected: fixed in V27.01.11, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC227E
    affected: mitigation, no fix planned
  • Siemens SIMATIC IPC227G < 28.01.14
    affected: fixed in V28.01.14, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC277E
    affected: mitigation, no fix planned
  • Siemens SIMATIC IPC277G < 28.01.14 Siemens SIMATIC IPC277G PRO < 28.01.14 Siemens SIMATIC IPC327G < 28.01.14
    affected: fixed in V28.01.14, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC347G
    affected: mitigation, no fix planned
  • Siemens SIMATIC IPC377G < 28.01.14
    affected: fixed in V28.01.14, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC427E < 21.01.21 Siemens SIMATIC IPC477E < 21.01.21 Siemens SIMATIC IPC477E PRO < 21.01.21
    affected: fixed in V21.01.21, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC527G
    affected: mitigation, no fix planned
  • Siemens SIMATIC IPC627E < 25.02.15 Siemens SIMATIC IPC647E < 25.02.15 Siemens SIMATIC IPC677E < 25.02.15 Siemens SIMATIC IPC847E < 25.02.15
    affected: fixed in V25.02.15, mitigation support.industry.siemens.com
  • Siemens SIMATIC IPC3000 SMART V3 Siemens SIMATIC ITP1000
    affected: mitigation, no fix planned

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
19 mo ago

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CNA 4.0 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H
CNA 4.0 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens SIMATIC Field PG M5
  • Siemens SIMATIC IPC BX-21A
  • Siemens SIMATIC IPC BX-32A
  • Siemens SIMATIC IPC BX-39A
  • Siemens SIMATIC IPC BX-59A
  • Siemens SIMATIC IPC PX-32A
  • Siemens SIMATIC IPC PX-39A
  • Siemens SIMATIC IPC PX-39A PRO
  • Siemens SIMATIC IPC RC-543A
  • Siemens SIMATIC IPC RC-543B
  • Siemens SIMATIC IPC RW-543A
  • Siemens SIMATIC IPC RW-543B
  • Siemens SIMATIC IPC127E
  • Siemens SIMATIC IPC227E
  • Siemens SIMATIC IPC227G
  • Siemens SIMATIC IPC277E
  • Siemens SIMATIC IPC277G
  • Siemens SIMATIC IPC277G PRO
  • Siemens SIMATIC IPC3000 SMART V3
  • Siemens SIMATIC IPC327G
  • Siemens SIMATIC IPC347G
  • Siemens SIMATIC IPC377G
  • Siemens SIMATIC IPC427E
  • Siemens SIMATIC IPC477E
  • Siemens SIMATIC IPC477E PRO
  • Siemens SIMATIC IPC527G
  • Siemens SIMATIC IPC627E
  • Siemens SIMATIC IPC647E
  • Siemens SIMATIC IPC677E
  • Siemens SIMATIC IPC847E
  • Siemens SIMATIC ITP1000

Classification

Weakness
  • CWE-693 Protection Mechanism Failure

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.