Siemens SIMATIC IPCs
Plan PatchCVSS 7.7ICS-CERT ICSA-26-295-07Oct 13, 2026
Siemens
Attack path
Attack VectorLocal
Auth RequiredNone
ComplexityHigh
User InteractionRequired
Summary
The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions.
What this means
What could happen
Could allow full system compromise — read data, modify settings, and disrupt operations
Who's at risk
Organizations in critical infrastructure using Siemens equipment
How it could be exploited
Attacker would need local or console access to the device without any credentials
Exploitability
Unlikely to be exploited — EPSS score 0.1%
Affected products (3)
3 with fix
Remediation & Mitigation
0/4
Do now — compensating controls
0/1WORKAROUNDAs a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.
Schedule — requires maintenance window
0/2Patching may require device reboot — plan for process interruption
UPGRADEUpdate to V1.1.4 or later version
UPGRADEUpdate to V28.01.15 or later version
Long-term hardening
0/1<br/>Note: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/77226e62-ff2b-4a2a-9426-088d107edf2cGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.