Answer in brief
CVE-2024-56182 records a Unknown severity vulnerability in CISA ADP Vulnrichment. The current sources do not mark it as known exploited. The current feed maps Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic), Siemens/SIMATIC IPC227E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Siemens/SIMATIC Field PG M5generic | >=0 <* | * |
| Siemens/SIMATIC Field PG M6generic | >=0 <V26.01.12 | V26.01.12 |
| Siemens/SIMATIC IPC127Egeneric | >=0 <V27.01.11 | V27.01.11 |
| Siemens/SIMATIC IPC227Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC227Ggeneric | >=0 <V28.01.14 | V28.01.14 |
| Siemens/SIMATIC IPC277Egeneric | >=0 <* | * |
| Siemens/SIMATIC IPC277Ggeneric | >=0 <V28.01.14 | V28.01.14 |
| Siemens/SIMATIC IPC277G PROgeneric | >=0 <V28.01.14 | V28.01.14 |
| Siemens/SIMATIC IPC3000 SMART V3generic | >=0 <* | * |
| Siemens/SIMATIC IPC327Ggeneric | >=0 <V28.01.14 | V28.01.14 |
| Siemens/SIMATIC IPC347Ggeneric | >=0 <* | * |
| Siemens/SIMATIC IPC377Ggeneric | >=0 <V28.01.14 | V28.01.14 |
| Siemens/SIMATIC IPC427Egeneric | >=0 <V21.01.21 | V21.01.21 |
| Siemens/SIMATIC IPC477Egeneric | >=0 <V21.01.21 | V21.01.21 |
| Siemens/SIMATIC IPC477E PROgeneric | >=0 <V21.01.21 | V21.01.21 |
| Siemens/SIMATIC IPC527Ggeneric | >=0 <* | * |
| Siemens/SIMATIC IPC627Egeneric | >=0 <V25.02.15 | V25.02.15 |
| Siemens/SIMATIC IPC647Egeneric | >=0 <V25.02.15 | V25.02.15 |
| Siemens/SIMATIC IPC677Egeneric | >=0 <V25.02.15 | V25.02.15 |
| Siemens/SIMATIC IPC847Egeneric | >=0 <V25.02.15 | V25.02.15 |
| Siemens/SIMATIC IPC BX-21Ageneric | >=0 <V31.01.07 | V31.01.07 |
| Siemens/SIMATIC IPC BX-32Ageneric | >=0 <V29.01.07 | V29.01.07 |
| Siemens/SIMATIC IPC BX-39Ageneric | >=0 <V29.01.07 | V29.01.07 |
| Siemens/SIMATIC IPC BX-59Ageneric | >=0 <V32.01.04 | V32.01.04 |
| Siemens/SIMATIC IPC PX-32Ageneric | >=0 <V29.01.07 | V29.01.07 |
| Siemens/SIMATIC IPC PX-39Ageneric | >=0 <V29.01.07 | V29.01.07 |
| Siemens/SIMATIC IPC PX-39A PROgeneric | >=0 <V29.01.07 | V29.01.07 |
| Siemens/SIMATIC IPC RC-543Ageneric | >=0 <V36.01.03 | V36.01.03 |
| Siemens/SIMATIC IPC RC-543Bgeneric | >=0 <V35.01.12 | V35.01.12 |
| Siemens/SIMATIC IPC RW-543Ageneric | >=0 <V1.1.4 | V1.1.4 |
| Siemens/SIMATIC IPC RW-543Bgeneric | >=0 <V35.02.10 | V35.02.10 |
| Siemens/SIMATIC ITP1000generic | >=0 <* | * |
Published upstream
Mar 11, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 8, 2026
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC IPC PX-39A (All versions < V29.01.07), SIMATIC IPC PX-39A PRO (All versions < V29.01.07), SIMATIC IPC RC-543A (All versions < V36.01.03), SIMATIC IPC RC-543B (All versions < V35.01.12), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC RW-543B (All versions < V35.02.10), SIMATIC IPC127E (All versions < V27.01.11), SIMATIC IPC227E (All versions), SIMATIC IPC227G (All versions < V28.01.14), SIMATIC IPC277E (All versions), SIMATIC IPC277G (All versions < V28.01.14), SIMATIC IPC277G PRO (All versions < V28.01.14), SIMATIC IPC3000 SMART V3 (All versions), SIMATIC IPC327G (All versions < V28.01.14), SIMATIC IPC347G (All versions), SIMATIC IPC377G (All versions < V28.01.14), SIMATIC IPC427E (All versions < V21.01.21), SIMATIC IPC477E (All versions < V21.01.21), SIMATIC IPC477E PRO (All versions < V21.01.21), SIMATIC IPC527G (All versions), SIMATIC IPC627E (All versions < V25.02.15), SIMATIC IPC647E (All versions < V25.02.15), SIMATIC IPC677E (All versions < V25.02.15), SIMATIC IPC847E (All versions < V25.02.15), SIMATIC ITP1000 (All versions). The affected devices have insufficient protection mechanism for the EFI(Extensible Firmware Interface) variables stored on the device. This could allow an authenticated attacker to disable the BIOS password without proper authorization by directly communicate with the flash controller.
Quoted source text, attributed separately from HOL analysis.