VDB
SSA-216014
SSA-216014
PUBLISHED
CVSS 8.199999809265137 HIGH
The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC IPC RC-543B | |
| Siemens | SIMATIC IPC PX-39A PRO < V29.01.07 | |
| Siemens | SIMATIC IPC477E | |
| Siemens | SIMATIC IPC677E < V25.02.15 | |
| Siemens | SIMATIC IPC277G PRO | |
| Siemens | SIMATIC IPC RW-543A < V1.1.4 | |
| Siemens | SIMATIC IPC277E | |
| Siemens | SIMATIC IPC277G < V28.01.14 | |
| Siemens | SIMATIC IPC RC-543A < V36.01.03 | |
| Siemens | SIMATIC IPC BX-32A < V29.01.07 | |
| Siemens | SIMATIC IPC477E PRO < V21.01.21 | |
| Siemens | SIMATIC IPC847E | |
| Siemens | SIMATIC IPC127E | |
| Siemens | SIMATIC IPC627E | |
| Siemens | SIMATIC IPC227E | |
| Siemens | SIMATIC IPC PX-39A < V29.01.07 | |
| Siemens | SIMATIC IPC327G < V28.01.14 | |
| Siemens | SIMATIC IPC277G | |
| Siemens | SIMATIC IPC377G < V28.01.14 | |
| Siemens | SIMATIC IPC3000 SMART V3 |
…and 37 more
Timeline
- Mar 11, 2025 CVE Published
- Sep 8, 2026 CVE Updated