CVE-2022-38773
Medium
Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
SeverityMedium
CVSS4.6
Exploit probability—
ProductSiemens Simatic Drive Controller Cpu 1504d Tf Firmware
PublishedJan 10, 2023
First seenJan 10, 2023
Weakness typeCWE-1326CWE-1326
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_drive_controller_cpu_1504d_tf_firmware | No range specified | — |
| siemens simatic_drive_controller_cpu_1507d_tf_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1510sp_f-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1510sp-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1511-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1511c-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1511f-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1511t-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1511tf-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1512c-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1512sp_f-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1512sp-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1513-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1513f-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1513r-1_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1515-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1515f-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1515r-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1515t-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1515tf-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516t-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1517-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1517h-3_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1517t-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518-4f_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518hf-4_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518t-4_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1513pro_f-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1513pro-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516pro_f-2_pn_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1516pro-2_pn_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1510sp_f-1_pn_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1510sp-1_pn_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1510sp-1_pn_rail_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1512sp_f-1_pn_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1512sp-1_pn_firmware | No range specified | — |
| siemens siplus_et_200sp_cpu_1512sp-1_pn_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1511-1_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1511f-1_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1513-1_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1513f-1_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1515f-2_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1515f-2_pn_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1515r-2_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1516-3_pn\/dp_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1516-3_pn\/dp_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1516-3_pn\/dp_tx_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_rail_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1517h-3_pn_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1518-4_pn\/dp_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | No range specified | — |
| siemens siplus_s7-1500_cpu_1518f-4_pn\/dp_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.