SIMATIC IPC vulnerabilities

A vulnerability in SIMATIC IPC BX-21A, SIMATIC IPC RW-543A, and SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G is due to the presence of a BIOS vendor test key in the UEFI Secure Boot key database. A local attacker with physical or administrative access can boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device.

A vulnerability in SIMATIC IPC devices allows an authenticated attacker to bypass EFI variable protection and disable the BIOS password without authorization by directly communicating with the flash controller.

A vulnerability in SIMATIC IPC devices allows an authenticated attacker to modify EFI variables without authorization by directly communicating with the flash controller. The issue stems from insufficient protection of EFI variables, potentially enabling changes to Secure Boot configuration.