High Patch available CVSS 7.7
Siemens SIMATIC industrial PCs have a Secure Boot test-key flaw
CISA ICS AdvisoriesSiemens · Critical Manufacturing, Transportation Systems, EnergyCVE-2026-72895
What happened. A BIOS vendor test key sits in the UEFI Secure Boot key database. A local attacker with physical or administrative access could boot an operating system signed with it, bypassing Secure Boot. Siemens has released new versions.
Who is affected. SIMATIC IPC BX-21A before 31.01.13, IPC RW-543A before 1.1.4, and IPC227G/277G/277G PRO/327G/377G before 28.01.15.
What to do. Check whether you run the listed SIMATIC IPC models and update to the fixed versions Siemens has released.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L2
- L1
Why: SIMATIC industrial PCs and panel PCs run HMI and control software on the plant floor, placing them mainly at L2, with some at L1.
- Are you exposed?
Check your asset inventory for the listed SIMATIC IPC models and compare their firmware or BIOS versions with the fixed versions.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CISA ICS Advisories (opens cisa.gov)
More on Siemens Manufacturing Transport Energy and power CVE-2026-72895