4.6
Medium
CVE-2022-38773 Affected devices do not contain an Immutable Root of Trust in Hardware
Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF | Versions not published | |
| SIMATIC Drive Controller CPU 1507D TF | Versions not published | |
| SIMATIC S7-1500 CPU 1510SP F-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1510SP-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511C-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511F-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511T-1 PN | Versions not published | |
| SIMATIC S7-1500 CPU 1511TF-1 PN | Versions not published |
Show the 62 other branches Hide the 62 other branches
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC Drive Controller CPU 1504D TF
The 24 CVEs of SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Medium
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Medium
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Medium
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critical