A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All… (CVE-2024-56182)
A vulnerability in multiple SIMATIC Field PG and IPC devices allows an authenticated attacker to disable the BIOS password by exploiting insufficient protection of EFI variables. This flaw affects various models and versions, with some versions fixed in later releases. The vulnerability has a high severity score of 8.2 and impacts confidentiality, integrity, and availability.
AI Analysis
Technical Summary
CVE-2024-56182 is a vulnerability affecting numerous SIMATIC Field PG and IPC devices. The root cause is insufficient protection of EFI (Extensible Firmware Interface) variables stored on the device, which could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicating with the flash controller. This vulnerability affects all versions of SIMATIC Field PG M5 and IPC RC-543B, IPC RW-543A, IPC127E, IPC227E, IPC227G, IPC277E, IPC277G, IPC277G PRO, IPC3000 SMART V3, IPC327G, IPC347G, IPC377G, IPC427E, IPC477E, IPC477E PRO, IPC527G, and ITP1000. It also affects versions of SIMATIC Field PG M6 before V26.01.12, IPC BX-21A before V31.01.07, IPC BX-32A, BX-39A, PX-32A, PX-39A, PX-39A PRO before V29.01.07, IPC BX-59A before V32.01.04, and IPC627E, IPC647E, IPC677E, IPC847E before V25.02.15. The CVSS v3.1 score is 8.2 (High), reflecting local attack vector, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.
Potential Impact
An authenticated attacker with high privileges can disable the BIOS password by manipulating EFI variables due to insufficient protection mechanisms. This compromises device security controls at the firmware level, potentially allowing unauthorized BIOS access and control over system boot processes, impacting confidentiality, integrity, and availability of the affected devices.
Mitigation Recommendations
No explicit patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated access to trusted users only and monitor for unauthorized attempts to modify EFI variables.
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All… (CVE-2024-56182)
Description
A vulnerability in multiple SIMATIC Field PG and IPC devices allows an authenticated attacker to disable the BIOS password by exploiting insufficient protection of EFI variables. This flaw affects various models and versions, with some versions fixed in later releases. The vulnerability has a high severity score of 8.2 and impacts confidentiality, integrity, and availability.
CVSS v3.1
Score 8.2high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-56182 is a vulnerability affecting numerous SIMATIC Field PG and IPC devices. The root cause is insufficient protection of EFI (Extensible Firmware Interface) variables stored on the device, which could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicating with the flash controller. This vulnerability affects all versions of SIMATIC Field PG M5 and IPC RC-543B, IPC RW-543A, IPC127E, IPC227E, IPC227G, IPC277E, IPC277G, IPC277G PRO, IPC3000 SMART V3, IPC327G, IPC347G, IPC377G, IPC427E, IPC477E, IPC477E PRO, IPC527G, and ITP1000. It also affects versions of SIMATIC Field PG M6 before V26.01.12, IPC BX-21A before V31.01.07, IPC BX-32A, BX-39A, PX-32A, PX-39A, PX-39A PRO before V29.01.07, IPC BX-59A before V32.01.04, and IPC627E, IPC647E, IPC677E, IPC847E before V25.02.15. The CVSS v3.1 score is 8.2 (High), reflecting local attack vector, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.
Potential Impact
An authenticated attacker with high privileges can disable the BIOS password by manipulating EFI variables due to insufficient protection mechanisms. This compromises device security controls at the firmware level, potentially allowing unauthorized BIOS access and control over system boot processes, impacting confidentiality, integrity, and availability of the affected devices.
Mitigation Recommendations
No explicit patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated access to trusted users only and monitor for unauthorized attempts to modify EFI variables.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x7x2-6gw9-jg8m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2024-56182"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa005aaacd9273b49ab46a4
Added to database: 09/08/2026, 12:55:06 UTC
Last enriched: 09/08/2026, 13:05:18 UTC
Last updated: 09/10/2026, 19:42:38 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.