CVE-2022-387734.6MediumCWE-1326

CVE-2022-38773: Siemens SIMATIC Drive Controller CPU 1504D TF vulnerability

Siemens · SIMATIC Drive Controller CPU 1504D TF

Affected: Siemens SIMATIC Drive Controller CPU 1504D TF · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days

23rd percentile

050100

Higher than 23% of scored CVEs

4.6MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Siemens · SIMATIC Drive Controller CPU 1504D TF0
Siemens · SIMATIC Drive Controller CPU 1507D TF0
Siemens · SIMATIC S7-1500 CPU 1510SP F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1510SP F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1510SP-1 PN0
Siemens · SIMATIC S7-1500 CPU 1510SP-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511C-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511C-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511T-1 PN0
Siemens · SIMATIC S7-1500 CPU 1511TF-1 PN0
Siemens · SIMATIC S7-1500 CPU 1512C-1 PN0
Siemens · SIMATIC S7-1500 CPU 1512C-1 PN0
Siemens · SIMATIC S7-1500 CPU 1512SP F-1 PN0
Siemens · SIMATIC S7-1500 CPU 1512SP F-1 PN0

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Missing Immutable Root of Trust in Hardware · Other weaknesses
Vendor: Siemens
Published: January 2023
Band: Unlikely (under 1%), January 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2022-38773 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.