CVE-2022-38773
Siemens SIMATIC Drive Controller CPU 1504D TF
MEDIUM 4.6
En bref
- Source
- NVD
- EPSS
- EPSS 0.30 % · centile 23 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- siemens
- Statut NVD
- Modified
Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Faiblesses (CWE)
- CWE-1326 — Missing Immutable Root of Trust in Hardware
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.6 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C | siemens |
| CVSS 3.1 | MEDIUM 4.6 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | NVD · productcert@siemens.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.8 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-41336
- GCVE · GCVE-0-2022-38773
Avis du CERT-FR
- CERTFR-2023-AVI-0015 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp_f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515tf-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517h-3_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517t-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4f_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513pro_f-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513pro-2_pn_firmware:-:*:*:*:*:*:*:*- +30 autres
Produits affectés
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |