Siemens SIMATIC IPC Hardcoded Key Vulnerability in UEFI Secure Boot (CVE-2026-72895)

Vulnerability Overview Vulnerability Name: SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs Publish Date: 2026-10-13 Last Update: 2026-10-13 Current Version: V1.0 CVSS v3.1 Base Score: 7.7 CVSS v4.0 Base Score: 8.4 Affected Products Affected Products: SIMATIC IPC Series Vulnerability Description: - Hard-coded test keys were discovered in the UEFI Secure Boot key database. - An attacker can exploit this vulnerability to bypass UEFI Secure Boot protection by booting an operating system via a UEFI application signed with that test key, even when Secure Boot is enabled. Mitigation Temporary Mitigations: - Users can manually remove the test keys from the database (e.g., for RW-534A or "Irisby-Ehrhardt" devices, use the command ). - Note: Loading default settings restores the test keys, so this measure must be reapplied after an upgrade. Product-Specific Fix: - Specific fixes or mitigations for each product can be found in the "Known Affected Products" section. - It is recommended to follow the guidance in the "General Security Recommendations" section. General Security Recommendations Network Protection: - Protect network devices using appropriate mechanisms. - Configure the device environment in accordance with Siemens industrial security guidelines. - Follow the recommendations in the product manuals. More Information: - Industrial security information is available at Siemens Industrial Security. Vulnerability Details CVE ID: CVE-2026-72895 CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:L/PR:N/UI:N/VC:H/HV:H/SC:N/NS:N CWE ID: CWE-1284: Use of Default Cryptographic Key Additional Information Contact Information: - For further inquiries regarding security vulnerabilities, please contact Siemens ProductCERT: https://www.siemens.com/productcert History V1.0 (2026-10-13): Publish date Terms of Use The use of Siemens security advisories is subject to the Siemens Terms of Use. --- Summary: This vulnerability involves hard-coded test keys found in the UEFI Secure Boot key database of the SIMATIC IPC series products, which may allow attackers to bypass Secure Boot protection. Users are advised to apply temporary mitigations and follow the general security recommendations and product-specific fixes provided by Siemens.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens SIMATIC IPC Hardcoded Key Vulnerability in UEFI Secure Boot (CVE-2026-72895)