medium4.6
CVE-2022-38773
Affected devices do not contain an Immutable Root of Trust in Hardware.
Impact
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Drive Controller Cpu 1504d Tf Firmware | All versions |
| Siemens | Simatic Drive Controller Cpu 1507d Tf Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1510sp F-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1510sp-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1511-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1511c-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1511f-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1511t-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1511tf-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1512c-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1512sp F-1 Pn Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1512sp-1 Pn Firmware | All versions |