Simatic Ipc Bx 21A
Monthly
Siemens SIMATIC IPC devices (BX-21A, RW-543A, IPC227G/277G/277G PRO/327G/377G) contain a BIOS vendor test key in the UEFI Secure Boot key database, enabling an attacker with local physical or administrative access to boot an OS or UEFI application signed with that key and completely bypass Secure Boot protections. Exploitation is access-gated - requiring hands-on device access or existing administrative privilege - and no public exploit code or confirmed active exploitation has been identified at time of analysis, but successful compromise results in full loss of confidentiality, integrity, and availability of the device.
Siemens SIMATIC IPC devices (BX-21A, RW-543A, IPC227G/277G/277G PRO/327G/377G) contain a BIOS vendor test key in the UEFI Secure Boot key database, enabling an attacker with local physical or administrative access to boot an OS or UEFI application signed with that key and completely bypass Secure Boot protections. Exploitation is access-gated - requiring hands-on device access or existing administrative privilege - and no public exploit code or confirmed active exploitation has been identified at time of analysis, but successful compromise results in full loss of confidentiality, integrity, and availability of the device.