Siemens has disclosed a critical vulnerability in SINAMICS S200 drive systems that could lead to a complete system compromise. The vulnerability, tracked as CVE-2024-56336, exposes affected devices to unauthorized manipulation of industrial processes, equipment damage, disruptions, and data theft due to an unlocked bootloader, which allows attackers to install malicious code without authentication. The risk is exacerbated by the device's wide use in critical industrial, manufacturing, energy, and infrastructure sectors. Although Siemens has not released a fix, it urges customers to implement network segregation and monitor systems while it works on a remedy.
Source: https://cybersecuritynews.com/siemens-sinamics-s200-bootloader-vulnerability/
"id": "sie903031625",
"linkid": "siemens",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"