Vulnerability in SIMATIC Industrial Computers by Siemens

CVE-2024-56182

What is CVE-2024-56182?

A serious security flaw has been detected in various Siemens SIMATIC industrial computers. This vulnerability arises from inadequate protection mechanisms related to the Extensible Firmware Interface (EFI) variables stored on the affected devices. It permits an authenticated attacker to bypass BIOS password protections without sufficient authorization, facilitating unauthorized access to critical system functionalities. Organizations using the specified models are advised to take immediate action to protect their systems from potential exploits.

References