# CVE-2024-56182: Siemens SIMATIC IPC and Field PG BIOS password bypass via EFI variables Source: https://junglewise.ai/threats/cve-2024-56182-siemens-simatic-ipc-and-field-pg-bios-password-bypass-via-efi Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2025-03-11. Updated: 2026-05-12 License: CC BY 4.0 with a link back CVE-2024-56182 · Severity: high · CVSS 8.2 · Published 2025-03-11 A security vulnerability has been identified in several Siemens industrial computing devices, including SIMATIC IPCs and Field PGs, which are used for automation and industrial control tasks. An attacker with administrative access to the device could bypass or disable the BIOS password, potentially allowing them to modify critical system startup settings. This could lead to unauthorized changes to the device's security configuration or persistent access that is difficult to detect. Technologies: [Siemens SIMATIC IPC BX-21A](https://junglewise.ai/threats/technologies/simatic-ipc-bx-21a), [Siemens SIMATIC IPC BX-39A](https://junglewise.ai/threats/technologies/simatic-ipc-bx-39a), [Siemens SIMATIC IPC BX-59A](https://junglewise.ai/threats/technologies/simatic-ipc-bx-59a), [Siemens SIMATIC IPC RW-543A](https://junglewise.ai/threats/technologies/simatic-ipc-rw-543a), [Siemens SIMATIC IPC127E](https://junglewise.ai/threats/technologies/simatic-ipc127e), [Siemens SIMATIC IPC227E](https://junglewise.ai/threats/technologies/simatic-ipc227e), [Siemens SIMATIC IPC227G](https://junglewise.ai/threats/technologies/simatic-ipc227g), [Siemens SIMATIC IPC277G](https://junglewise.ai/threats/technologies/simatic-ipc277g), [Siemens SIMATIC IPC277G PRO](https://junglewise.ai/threats/technologies/simatic-ipc277g-pro), [Siemens SIMATIC IPC327G](https://junglewise.ai/threats/technologies/simatic-ipc327g). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens). ## Quick answers **Is CVE-2024-56182 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-56182 being exploited in the wild. **How severe is CVE-2024-56182?** High severity, with a CVSS score of 8.2, published 11 March 2025. **Which products and versions are affected?** Siemens SIMATIC Field PG M5 All versions; Siemens SIMATIC Field PG M6 All versions < V26.01.12; Siemens SIMATIC IPC BX-21A All versions < V31.01.07; Siemens SIMATIC IPC BX-32A All versions < V29.01.07; and 17 more. **Is there a fix for CVE-2024-56182?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **How is CVE-2024-56182 attacked?** It is attacked with local access, in an operating system. **Am I affected by CVE-2024-56182?** Check whether you run Siemens SIMATIC Field PG M5, Siemens SIMATIC Field PG M6, Siemens SIMATIC IPC BX-21A or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Technical details A protection mechanism failure (CWE-693) exists in the handling of Extensible Firmware Interface (EFI) variables across multiple Siemens SIMATIC product lines. The vulnerability stems from insufficient protection of EFI variables stored on the device's flash memory. An authenticated attacker with high privileges can bypass the BIOS password by communicating directly with the flash controller. This allows for unauthorized modification of BIOS/UEFI settings, including the potential to disable Secure Boot or other firmware-level security controls. Siemens has released BIOS updates for many affected models, though some legacy versions currently have no planned fix. ## Affected products - Siemens SIMATIC Field PG M5 All versions - Siemens SIMATIC Field PG M6 All versions < V26.01.12 - Siemens SIMATIC IPC BX-21A All versions < V31.01.07 - Siemens SIMATIC IPC BX-32A All versions < V29.01.07 - Siemens SIMATIC IPC BX-39A All versions < V29.01.07 - Siemens SIMATIC IPC BX-59A All versions < V32.01.04 - Siemens SIMATIC IPC PX-32A All versions < V29.01.07 - Siemens SIMATIC IPC PX-39A All versions < V29.01.07 - Siemens SIMATIC IPC PX-39A PRO All versions < V29.01.07 - Siemens SIMATIC IPC RC-543A All versions < V36.01.03 - Siemens SIMATIC IPC RC-543B All versions < V35.01.12 - Siemens SIMATIC IPC RW-543A All versions < V1.1.4 - Siemens SIMATIC IPC RW-543B All versions < V35.02.10 - Siemens SIMATIC IPC127E All versions < V27.01.11 - Siemens SIMATIC IPC227E All versions - Siemens SIMATIC IPC227G All versions < V28.01.14 - Siemens SIMATIC IPC277E All versions - Siemens SIMATIC IPC277G All versions < V28.01.14 - Siemens SIMATIC IPC277G PRO All versions < V28.01.14 - Siemens SIMATIC IPC3000 SMART V3 All versions - Siemens SIMATIC IPC327G All versions < V28.01.14 - Siemens,versions: SIMATIC IPC347G ## Timeline - 2025-03-11: disclosed - 2025-03-11: advisory - 2026-05-12: other: Last advisory update ## References - [https://cert-portal.siemens.com/productcert/html/ssa-216014.html](https://cert-portal.siemens.com/productcert/html/ssa-216014.html) ## Related threats - [Siemens SIMATIC IPC UEFI Secure Boot bypass via test key](https://junglewise.ai/threats/cve-2026-72895-a-vulnerability-has-been-identified-in-simatic-ipc-bx-21a-all) - [Siemens Industrial Edge unauthorized API access](https://junglewise.ai/threats/cve-2026-44414-a-vulnerability-has-been-identified-in-industrial-edge-cloud) - [Siemens SIMATIC IPC and Field PG Secure Boot bypass via EFI variables](https://junglewise.ai/threats/cve-2024-56181-siemens-simatic-ipc-and-field-pg-secure-boot-bypass-via-efi)