Advisories

Siemens SIMATIC IPCs

The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens SIMATIC IPCs are affected: SIMATIC IPC BX-21A vers:intdot/ SIMATIC IPC RW-543A vers:intdot/ SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G vers:intdot/ CVSS Vendor Equipment v3 7.7 Siemens SIMATIC IP

Read at CISA Cybersecurity Advisories

Vendor

Siemens

Product

GRUB / Secure Boot, SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

3.1

EPSS

0.001 (p1)

Fix

available

Exposure class

Operating system, OT / ICS, Mobile OS

• CISA Cybersecurity Advisories (cisa.gov)
• CVE-2026-72895 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 27
   CVE NVD 18d ago

   A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G /…

   CVSS 7.7 CVE-2026-72895 Apple