Siemens SIMATIC IPCs

First reported by CISA Cybersecurity Advisories, concerning Siemens, UEFI, Secure Boot.

1 day ago By HelpMeTrack News Desk Tech & AI

Editorial graphic — no licensed photograph was available for this story.

HelpMeTrack began tracking this technology story after CISA Cybersecurity Advisories reported it on 22 Oct 2026, concerning Siemens, UEFI, Secure Boot.

Tracked as CVE-2026-72895, the flaw is rated HIGH with a CVSS score of 7.7 out of 10, classified as CWE-1394 Use of Default Cryptographic Key. It affects 3 models. As a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.

Key facts

CVE: CVE-2026-72895
Severity: HIGH (CVSS 7.7/10)
Vulnerability type: CWE-1394 Use of Default Cryptographic Key
Affected products: 3 models
Official mitigation: As a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended.

Why we're tracking this

We'll keep this page updated as the story develops, with links to the original reporting below.

Development timeline

22 Oct, 11:41 UTC First reported by CISA Cybersecurity Advisories