← Database

CVE-2022-38773

MEDIUM CVSS: 4.6 Published: 2023-01-10 Modified: 2026-06-17

Description

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Affected Platforms

Siemens Siplus S7-1500 Cpu 1515F-2 Pn Rail FirmwareSiemens Simatic S7-1500 Cpu 1515F-2 PnSiemens Simatic S7-1500 Cpu 1518Tf-4 Pn\/Dp FirmwareSiemens Siplus S7-1500 Cpu 1515F-2 Pn T2 RailSiemens Simatic S7-1500 Cpu 1517H-3 Pn FirmwareSiemens Simatic S7-1500 Cpu 1518Hf-4 PnSiemens Siplus S7-1500 Cpu 1516-3 Pn\/Dp FirmwareSiemens Siplus S7-1500 Cpu 1518-4 Pn\/Dp MfpSiemens Simatic S7-1500 Cpu 1517T-3 Pn\/Dp FirmwareSiemens Simatic Drive Controller Cpu 1507D Tf

Weakness Type

CWE-1326, NVD-CWE-Other

References