Log in Start free

Vulnerability · Published Jan 10, 2023 · Assigned by siemens

CVE-2022-38773

Medium 4.6

In plain English

A medium-severity security flaw in SIMATIC Drive Controller CPU 1504D TF from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)0.3%top 76.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Affected products (as reported)

VendorProductVersions
Siemens SIMATIC Drive Controller CPU 1504D TF 0 – before *
Siemens SIMATIC Drive Controller CPU 1507D TF 0 – before *
Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1510SP-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1510SP-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511T-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512C-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512C-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512SP-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1512SP-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513F-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1513R-1 PN 0 – before *
Siemens SIMATIC S7-1500 CPU 1515-2 PN 0 – before *

Weakness: CWE-1326 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C

References