PT-2025-10724 · Siemens · Simatic Ipc427E+24

Published 2025-03-11 · Updated 2025-03-11 · CVE-2024-56181

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC Field PG M5 (All versions) SIMATIC IPC BX-21A versions prior to V31.01.07 SIMATIC IPC BX-32A versions prior to V29.01.07 SIMATIC IPC BX-39A versions prior to V29.01.07 SIMATIC IPC BX-59A versions prior to V32.01.04 SIMATIC IPC PX-32A versions prior to V29.01.07 SIMATIC IPC PX-39A versions prior to V29.01.07 SIMATIC IPC PX-39A PRO versions prior to V29.01.07 SIMATIC IPC RC-543B (All versions) SIMATIC IPC RW-543A (All versions) SIMATIC IPC127E (All versions) SIMATIC IPC227E (All versions) SIMATIC IPC227G (All versions) SIMATIC IPC277E (All versions) SIMATIC IPC277G (All versions) SIMATIC IPC277G PRO (All versions) SIMATIC IPC3000 SMART V3 (All versions) SIMATIC IPC327G (All versions) SIMATIC IPC347G (All versions) SIMATIC IPC377G (All versions) SIMATIC IPC427E (All versions) SIMATIC IPC477E (All versions) SIMATIC IPC477E PRO (All versions) SIMATIC IPC527G (All versions) SIMATIC IPC627E versions prior to V25.02.15 SIMATIC IPC647E versions prior to V25.02.15 SIMATIC IPC677E versions prior to V25.02.15 SIMATIC IPC847E versions prior to V25.02.15 SIMATIC ITP1000 (All versions)

Description The affected devices have insufficient protection mechanisms for the EFI (Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicating with the flash controller.

Recommendations As a temporary workaround, consider restricting access to the flash controller until a patch is available. For SIMATIC Field PG M5 and other devices with all versions affected, update to a version that includes a fix for this issue when available. For devices with versions prior to a specified version (e.g., SIMATIC IPC BX-21A prior to V31.01.07), update to the specified version or later when available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2025-02901

CVE-2024-56181

Affected Products

Simatic Field Pg M5

Simatic Ipc Bx-21A

Simatic Ipc Bx-32A

Simatic Ipc Bx-39A

Simatic Ipc Bx-59A

Simatic Ipc Px-39A

Simatic Ipc Rc-543B

Simatic Ipc Rw-543A

Simatic Ipc127E

Simatic Ipc227E

Simatic Ipc277E

Simatic Ipc277G Pro

Simatic Ipc3000 Smart V3

Simatic Ipc327G

Simatic Ipc347G

Simatic Ipc377G

Simatic Ipc427E

Simatic Ipc477E

Simatic Ipc477E Pro

Simatic Ipc527G

Simatic Ipc627E

Simatic Ipc647E

Simatic Ipc677E

Simatic Ipc847E

Simatic Itp1000

References · 9

• https://bdu.fstec.ru/vul/2025-02901 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56181 · Security Note
• https://twitter.com/vulns_space/status/1899408597156561133 · Twitter Post
• https://t.me/cvetracker/18912 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-216014.pdf · Note
• https://twitter.com/cybercronai/status/1899426444003950701 · Twitter Post
• https://twitter.com/CveFindCom/status/1899400864457949458 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-216014.html · Note
• https://twitter.com/CVEnew/status/1899404052544319622 · Twitter Post