CVE-2024-56182 A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions <…
Description
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions < V21.01.21), SIMATIC IPC477E (All versions < V21.01.21), SIMATIC IPC477E PRO (All versions < V21.01.21), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC Field PG M5 | Versions not published | |
| SIMATIC Field PG M6 26.01 | earliest → < 26.01.12 | 26.01.12 |
| SIMATIC IPC BX-21A 31.01 | earliest → < 31.01.07 | 31.01.07 |
| SIMATIC IPC BX-32A 29.01 | earliest → < 29.01.07 | 29.01.07 |
| SIMATIC IPC BX-39A 29.01 | earliest → < 29.01.07 | 29.01.07 |
| SIMATIC IPC BX-59A 32.01 | earliest → < 32.01.04 | 32.01.04 |
| SIMATIC IPC PX-32A 29.01 | earliest → < 29.01.07 | 29.01.07 |
| SIMATIC IPC PX-39A 29.01 | earliest → < 29.01.07 | 29.01.07 |
| SIMATIC IPC PX-39A PRO 29.01 | earliest → < 29.01.07 | 29.01.07 |
Show the 23 other branches Hide the 23 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC IPC RC-543A 36.01 | earliest → < 36.01.03 | 36.01.03 |
| SIMATIC IPC RC-543B 35.01 | earliest → < 35.01.12 | 35.01.12 |
| SIMATIC IPC RW-543A 1.1 | earliest → < 1.1.4 | 1.1.4 |
| SIMATIC IPC RW-543B 35.02 | earliest → < 35.02.10 | 35.02.10 |
| SIMATIC IPC127E 27.01 | earliest → < 27.01.11 | 27.01.11 |
| SIMATIC IPC227E | Versions not published | |
| SIMATIC IPC227G 28.01 | earliest → < 28.01.14 | 28.01.14 |
| SIMATIC IPC277E | Versions not published | |
| SIMATIC IPC277G 28.01 | earliest → < 28.01.14 | 28.01.14 |
| SIMATIC IPC277G PRO 28.01 | earliest → < 28.01.14 | 28.01.14 |
| SIMATIC IPC3000 SMART V3 | Versions not published | |
| SIMATIC IPC327G 28.01 | earliest → < 28.01.14 | 28.01.14 |
| SIMATIC IPC347G | Versions not published | |
| SIMATIC IPC377G 28.01 | earliest → < 28.01.14 | 28.01.14 |
| SIMATIC IPC427E 21.01 | earliest → < 21.01.21 | 21.01.21 |
| SIMATIC IPC477E 21.01 | earliest → < 21.01.21 | 21.01.21 |
| SIMATIC IPC477E PRO 21.01 | earliest → < 21.01.21 | 21.01.21 |
| SIMATIC IPC527G | Versions not published | |
| SIMATIC IPC627E 25.02 | earliest → < 25.02.15 | 25.02.15 |
| SIMATIC IPC647E 25.02 | earliest → < 25.02.15 | 25.02.15 |
| SIMATIC IPC677E 25.02 | earliest → < 25.02.15 | 25.02.15 |
| SIMATIC IPC847E 25.02 | earliest → < 25.02.15 | 25.02.15 |
| SIMATIC ITP1000 | Versions not published |