CVE-2026-72895: High severity Siemens SIMATIC IPC BX-21A vulnerability
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SIMATIC IPC BX-21Ato a version that resolves this vulnerability.Fixed in V31.01.13 - Upgrade
Upgrade
SIMATIC IPC RW-543Ato a version that resolves this vulnerability.Fixed in V1.1.4 - Upgrade
Upgrade
SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377Gto a version that resolves this vulnerability.Fixed in V28.01.15
Event History
Frequently Asked Questions
Which systems need remediation?
Affected systems are SIMATIC IPC BX-21A versions earlier than V31.01.13, SIMATIC IPC RW-543A versions earlier than V1.1.4, and SIMATIC IPC227G, IPC277G, IPC277G PRO, IPC327G, and IPC377G versions earlier than V28.01.15.
What level of access does an attacker need?
Exploitation requires local physical or administrative access to the device. The attacker must be able to boot an operating system or UEFI application signed with the BIOS vendor test key.
Does enabling UEFI Secure Boot prevent exploitation?
No. The test key is present in the UEFI Secure Boot key database, allowing signed code using that key to bypass Secure Boot protections even when Secure Boot is enabled.
What is the likely impact if the issue is exploited?
An attacker may boot unauthorized operating system or UEFI code and potentially obtain a full loss of confidentiality, integrity, and availability of the device.