Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Siemens SIMATIC IPCs allow UEFI Secure Boot bypass (CVE-2026-72895)

Original title: Siemens SIMATIC IPCs

CISA Advisoriesby CISA ()4 min read
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

Physical access attackers can boot arbitrary OS signed with AMI test key; fixes released for BX-21A, RW-543A, and IPC227G series.

Siemens SIMATIC IPCs contain a vulnerability allowing local attackers with physical or administrative access to boot an operating system or UEFI application signed with a test key, bypassing UEFI Secure Boot even when enabled. The flaw affects SIMATIC IPC BX-21A before 31.01.13, RW-543A before 1.1.4, and IPC227G/277G/PRO/327G/377G before 28.01.15. Siemens released fixed BIOS versions; CISA recommends network isolation for control systems and general defensive practices.

Unconfirmed: Whether the test key is present in deployed systems or actively exploited is unknown.

Key facts
  • Update to BIOS V31.01.13 or later for BX-21A
  • Update to V1.1.4 for RW-543A
  • Update to V28.01.15 for IPC227G series
  • Load default settings after upgrade and reprovision Secure Boot keys
  • Temporarily remove test key from database
Security assessment · AI, from the article

Impact: Bypassing UEFI Secure Boot to execute arbitrary OS or UEFI app

What to do
  1. 1.Update to latest fixed BIOS version
  2. 2.Load BIOS default settings after upgrade
  3. 3.Reprovision Secure Boot keys if previously set
Analyze CVE-2026-72895 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-72895
Tags
siemensuefisecure-bootcisa-advisoryipc
Vendors
Siemens
Products
SIMATIC IPC BX-21ASIMATIC IPC RW-543ASIMATIC IPC227GIPC277GIPC277G PROIPC327GIPC377G
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-72895
UEFI Secure Boot test-key bypass in Siemens SIMATIC IPC
8.4—

From the original article

4 min read at cisa.gov

View CSAF Summary The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.