CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:23.

Filters

1 active

Reset filters

Search: SSA-159454

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-159454

SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs

Siemens — SIMATIC IPC BX-21A

Siemens ProductCERThigh

Published

13 October 2026

Last update

13 October 2026

Linked CVEs

CVE-2026-72895

Affected sectors

Risk evaluation

The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions.

Mitigation summary

<br/>Note: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards.

Revision history (1)

Initial publication — 13 October 2026
Publication Date

Official source: Siemens ProductCERT