4.6
Moyenne
CVE-2022-38773 Affected devices do not contain an Immutable Root of Trust in Hardware
Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF | Versions non publiées | |
| SIMATIC Drive Controller CPU 1507D TF | Versions non publiées | |
| SIMATIC S7-1500 CPU 1510SP F-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1510SP-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1511-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1511C-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1511F-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1511T-1 PN | Versions non publiées | |
| SIMATIC S7-1500 CPU 1511TF-1 PN | Versions non publiées |
Afficher les 62 autres branches Masquer les 62 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC Drive Controller CPU 1504D TF
Les 24 CVE de SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Moyenne
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Moyenne
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Moyenne
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critique