CVE-2024-56181: High severity Siemens Simatic Field Pg M5 vulnerability
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.
Affected Software
Event History
Frequently Asked Questions
What devices are affected by CVE-2024-56181?
CVE-2024-56181 affects various models of Siemens SIMATIC devices including Field PG M5, IPC BX, PX series, and others with specific versions.
What is the severity level of CVE-2024-56181?
The severity level of CVE-2024-56181 is classified as critical due to the potential impact on the security of affected devices.
How can I mitigate CVE-2024-56181?
To mitigate CVE-2024-56181, it is recommended to update the affected devices to the latest firmware version that addresses this vulnerability.
Is CVE-2024-56181 remotely exploitable?
Yes, CVE-2024-56181 is considered remotely exploitable, which increases the risk of unauthorized access to affected systems.
What are the potential consequences of not addressing CVE-2024-56181?
Failure to address CVE-2024-56181 could result in unauthorized control over affected devices, leading to operational disruption and potential data compromise.