CVE-2022-38773

Katalog CVE

CVSS 6.8 · Medium EPSS 0,29%

Kerentanan Missing Immutable Root of Trust in Hardware pada siemens simatic drive controller cpu 1504d tf firmware, siemens simatic drive controller cpu 1507d tf firmware +58 lainnya. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Rincian

Terbit di NVD

10 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1326: Missing Immutable Root of Trust in Hardware

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 70 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-482757.pdf advisory vendor
• https://cert-portal.siemens.com/productcert/html/ssa-482757.html