CVE-2024-56181 is a vulnerability in various Siemens SIMATIC industrial PCs and Field PG M5 devices where the EFI variables stored on the device lack sufficient protection mechanisms. An authenticated attacker with high privileges can exploit this weakness to modify the secure boot configuration without proper authorization by directly interacting with the flash controller. This could lead to a complete compromise of device integrity, affecting confidentiality, integrity, and availability. The vulnerability has a CVSS v3.1 score of 8.2 (high severity) with attack vector local, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. No patch or remediation information is provided in the source data.

The vulnerability allows an authenticated attacker with high privileges to alter the secure boot configuration of affected devices. This can compromise the device's boot integrity, potentially enabling persistent unauthorized code execution or disabling security features. The impact affects confidentiality, integrity, and availability of the affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to devices to trusted administrators only and monitor for unauthorized changes to EFI variables or secure boot settings. Follow Siemens' official security advisories for updates and remediation instructions.