Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

SIMATIC IPC477E PRO

Source -

CNAADP

CNA CVEs -

2

ADP CVEs -

1

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
3Vulnerabilities found
CVE-2025-2884
Assigner-CERT/CC
ShareView Details
Assigner-CERT/CC
CVSS Score-6.6||MEDIUM
EPSS-0.20% / 9.94%
||
7 Day CHG~0.00%
Published-10 Jun, 2025 | 17:29
Updated-14 Apr, 2026 | 10:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0

Action-Not Available
Vendor-Trusted Computing GroupSiemens AG
Product-TPM2.0SIMATIC ITP1000SIMATIC IPC427ESIMATIC IPC847ESIMATIC Field PG M5SIPLUS IPC427ESIMATIC IPC227ESIMATIC IPC RW-528ASIMATIC IPC627ESIMATIC IPC BX-39ASIMATIC IPC677ESIMATIC IPC MD-57ASIMATIC IPC PX-39ASIMATIC Field PG M6SIMATIC IPC477ESIMATIC IPC PX-39A PROSIMATIC IPC BX-32ASIMATIC IPC277ESIMATIC IPC647ESIMATIC IPC477E PROSIMATIC CN 4100SIMATIC IPC PX-32ASIMATIC IPC BX-56ASIMATIC IPC BX-59ASIMATIC IPC RW-548A
CWE ID-CWE-125
Out-of-bounds Read
CVE-2024-56182
Assigner-Siemens
ShareView Details
Assigner-Siemens
CVSS Score-8.4||HIGH
EPSS-0.20% / 10.53%
||
7 Day CHG~0.00%
Published-11 Mar, 2025 | 09:48
Updated-12 May, 2026 | 10:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.

Action-Not Available
Vendor-Siemens AG
Product-SIMATIC IPC477E PROSIMATIC IPC227GSIMATIC IPC PX-32ASIMATIC IPC127ESIMATIC IPC BX-32ASIMATIC IPC277G PROSIMATIC IPC RC-543ASIMATIC IPC277ESIMATIC IPC BX-21ASIMATIC IPC477ESIMATIC IPC3000 SMART V3SIMATIC IPC647ESIMATIC IPC RW-543ASIMATIC IPC PX-39A PROSIMATIC IPC427ESIMATIC IPC277GSIMATIC IPC527GSIMATIC IPC BX-39ASIMATIC IPC RC-543BSIMATIC IPC377GSIMATIC ITP1000SIMATIC IPC227ESIMATIC IPC327GSIMATIC IPC677ESIMATIC Field PG M5SIMATIC IPC847ESIMATIC IPC627ESIMATIC IPC BX-59ASIMATIC IPC PX-39ASIMATIC Field PG M6SIMATIC IPC RW-543BSIMATIC IPC347G
CWE ID-CWE-693
Protection Mechanism Failure
CVE-2024-56181
Assigner-Siemens
ShareView Details
Assigner-Siemens
CVSS Score-8.4||HIGH
EPSS-0.20% / 10.53%
||
7 Day CHG~0.00%
Published-11 Mar, 2025 | 09:48
Updated-12 May, 2026 | 10:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions), SIMATIC IPC477E (All versions), SIMATIC IPC477E PRO (All versions), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to alter the secure boot configuration without proper authorization by directly communicate with the flash controller.

Action-Not Available
Vendor-Siemens AG
Product-SIMATIC IPC BX-39ASIMATIC IPC477E PROSIMATIC IPC227GSIMATIC IPC RC-543BSIMATIC IPC377GSIMATIC ITP1000SIMATIC IPC PX-32ASIMATIC IPC127ESIMATIC IPC227ESIMATIC IPC327GSIMATIC IPC BX-32ASIMATIC IPC277G PROSIMATIC IPC677ESIMATIC IPC RC-543ASIMATIC Field PG M5SIMATIC IPC277ESIMATIC IPC BX-21ASIMATIC IPC847ESIMATIC IPC627ESIMATIC IPC477ESIMATIC IPC3000 SMART V3SIMATIC IPC BX-59ASIMATIC IPC647ESIMATIC IPC PX-39ASIMATIC IPC RW-543ASIMATIC IPC RW-543BSIMATIC IPC PX-39A PROSIMATIC IPC347GSIMATIC IPC427ESIMATIC IPC277GSIMATIC IPC527G
CWE ID-CWE-693
Protection Mechanism Failure