CVE-2022-38465

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-568427.pdf	Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-568428.pdf

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_drive_controller_cpu_1504d_tf:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_drive_controller_cpu_1507d_tf:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1211c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1211c:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1212c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1212c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1212fc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1212fc:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1214fc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1214fc:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1214c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1214c:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1215fc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1215fc:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1215c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1215c:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1217c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1217c:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp-1:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_151511c-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_151511c-1:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_151511f-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_151511f-1:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511t-1:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511tf-1:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_firmware:*:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512sp-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_firmware:*:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512spf-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512spf-1_firmware:*:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_firmware:*:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_firmware:*:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513r-1:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_firmware:*:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_15prof-2:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_15prof-2_firmware:*:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:h:siemens:simatic_s7-1500_cpu_15pro-2:-:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_15pro-2_firmware:*:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515r-2:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515t-2:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro_f_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro_f:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516t-3:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516tf-3:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518hf-4:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518t-4:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518tf-4:-:*:*:*:*:*:*:*

Configuration 44 (hide)

cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*

Configuration 45 (hide)

AND

cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-plcsim_advanced:-:*:*:*:*:*:*:*

History

07 Nov 2023, 03:50

Type	Values Removed	Values Added
Summary	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.

14 Feb 2023, 11:15

Type	Values Removed	Values Added
Summary	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions), SINUMERIK ONE (All versions). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.

08 Nov 2022, 11:15

Type	Values Removed	Values Added
Summary	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions), SINUMERIK ONE (All versions). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.
References		(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-568428.pdf -

14 Oct 2022, 17:04

Type	Values Removed	Values Added
First Time		Siemens simatic Drive Controller Cpu 1504d Tf Siemens simatic S7-1200 Cpu 12 1215fc Firmware Siemens simatic S7-1500 Cpu 1518hf-4 Firmware Siemens simatic S7-1200 Cpu 12 1217c Siemens simatic S7-1500 Cpu 1518t-4 Firmware Siemens simatic S7-1500 Cpu 1516f-3 Firmware Siemens simatic S7-1500 Cpu 1515t-2 Siemens simatic Et 200 Sp Open Controller Cpu 1515sp Pc2 Firmware Siemens simatic S7-1500 Cpu 1516tf-3 Siemens simatic S7-1500 Cpu 1516f-3 Siemens simatic S7-1500 Cpu 1512spf-1 Firmware Siemens simatic S7-1500 Cpu 1515f-2 Siemens simatic S7-1500 Cpu 1510sp-1 Firmware Siemens simatic S7-1500 Cpu 1517-3 Firmware Siemens simatic S7-1200 Cpu 12 1215c Siemens simatic S7-1200 Cpu 12 1214c Siemens simatic S7-1500 Cpu 1510sp-1 Siemens simatic S7-1500 Cpu 1515r-2 Firmware Siemens simatic S7-1500 Cpu 1513f-1 Siemens simatic S7-plcsim Advanced Firmware Siemens simatic S7-1500 Cpu 1515f-2 Firmware Siemens simatic S7-1500 Cpu 1516tf-3 Firmware Siemens simatic S7-1500 Cpu 151511f-1 Firmware Siemens simatic S7-1500 Cpu 1510sp Siemens simatic S7-1500 Cpu 1512sp-1 Siemens simatic S7-1500 Cpu 15prof-2 Siemens simatic S7-1500 Cpu 1511t-1 Siemens simatic S7-1200 Cpu 12 1212c Siemens simatic S7-1500 Cpu 1515-2 Firmware Siemens simatic S7-1200 Cpu 12 1217c Firmware Siemens simatic S7-1200 Cpu 12 1211c Siemens simatic S7-1500 Cpu 151511c-1 Siemens simatic S7-1500 Cpu 1516pro F Firmware Siemens simatic S7-1500 Cpu 1513-1 Firmware Siemens simatic S7-1200 Cpu 12 1215c Firmware Siemens simatic S7-1500 Cpu 1516t-3 Firmware Siemens simatic S7-1500 Cpu 1518tf-4 Firmware Siemens simatic S7-1500 Cpu 1513-1 Siemens simatic S7-1500 Cpu 15pro-2 Firmware Siemens simatic S7-1500 Cpu 1516t-3 Siemens simatic S7-1500 Cpu 1518t-4 Siemens simatic Et 200 Open Controller Cpu 1515sp Pc Siemens simatic S7-1500 Cpu 1518hf-4 Siemens simatic S7-1200 Cpu 12 1215fc Siemens simatic S7-1500 Cpu 1516pro F Siemens simatic S7-1500 Cpu 15pro-2 Siemens simatic S7-1500 Cpu 1511tf-1 Siemens simatic S7-1500 Cpu 1515t-2 Firmware Siemens simatic S7-1200 Cpu 12 1212fc Siemens simatic S7-1200 Cpu 12 1214fc Siemens simatic S7-1500 Cpu 1516-3 Firmware Siemens simatic Drive Controller Cpu 1507d Tf Siemens simatic Drive Controller Cpu 1504d Tf Firmware Siemens simatic S7-1500 Cpu 1518-4 Firmware Siemens simatic S7-1500 Cpu 1515r-2 Siemens simatic S7-1500 Cpu 1517f-3 Siemens simatic S7-plcsim Advanced Siemens simatic S7-1500 Cpu 1513r-1 Firmware Siemens simatic S7-1500 Cpu 1518f-4 Firmware Siemens simatic S7-1500 Software Controller Siemens simatic S7-1200 Cpu 12 1214fc Firmware Siemens simatic Drive Controller Cpu 1507d Tf Firmware Siemens Siemens simatic S7-1200 Cpu 12 1212fc Firmware Siemens simatic S7-1500 Cpu 1518-4 Siemens simatic S7-1500 Cpu 1517f-3 Firmware Siemens simatic S7-1500 Cpu 1513f-1 Firmware Siemens simatic S7-1500 Cpu 151511f-1 Siemens simatic Et 200 Open Controller Cpu 1515sp Pc2 Siemens simatic S7-1500 Cpu 1510sp Firmware Siemens simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware Siemens simatic S7-1500 Cpu 1513r-1 Siemens simatic S7-1500 Cpu 1518tf-4 Siemens simatic S7-1500 Cpu 1511-1 Siemens simatic S7-1500 Cpu 1511t-1 Firmware Siemens simatic S7-1200 Cpu 12 1211c Firmware Siemens simatic S7-1200 Cpu 12 1212c Firmware Siemens simatic S7-1500 Cpu 1515-2 Siemens simatic S7-1500 Cpu 1517-3 Siemens simatic S7-1500 Cpu 151511c-1 Firmware Siemens simatic S7-1200 Cpu 12 1214c Firmware Siemens simatic S7-1500 Cpu 15prof-2 Firmware Siemens simatic S7-1500 Cpu 1512c-1 Firmware Siemens simatic S7-1500 Cpu 1511tf-1 Firmware Siemens simatic S7-1500 Cpu 1518f-4 Siemens simatic S7-1500 Cpu 1516-3 Siemens simatic S7-1500 Cpu 1512spf-1 Siemens simatic S7-1500 Cpu 1512c-1 Siemens simatic S7-1500 Cpu 1512sp-1 Firmware Siemens simatic S7-1500 Cpu 1511-1 Firmware
References	~~(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-568427.pdf -~~	(MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-568427.pdf - Vendor Advisory
CPE		cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511tf-1:-:::::::* cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1215c_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1212fc:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_151511c-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1:-:::::::* cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1212fc_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c-1:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512spf-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_15pro-2_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_firmware:::::::: cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512sp-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518tf-4:-:::::::* cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1215fc:-:::::::* cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1217c_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512spf-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3:-:::::::* cpe:2.3:h:siemens:simatic_s7-plcsim_advanced:-:::::::* cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1214fc_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1211c:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_15prof-2_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1214c:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515r-2:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518hf-4:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_15prof-2:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515t-2:-:::::::* cpe:2.3:h:siemens:simatic_drive_controller_cpu_1507d_tf:-:::::::* cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1214fc:-:::::::* cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516t-3:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_15pro-2:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3:-:::::::* cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1212c_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511t-1:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1215c:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1214c_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp:-:::::::* cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1217c:-:::::::* cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc:-:::::::* cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518t-4:-:::::::* cpe:2.3:a:siemens:simatic_s7-1500_software_controller:::::::: cpe:2.3:h:siemens:simatic_s7-1200_cpu_12_1212c:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1215fc_firmware:::::::: cpe:2.3:h:siemens:simatic_drive_controller_cpu_1504d_tf:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_151511f-1:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513r-1:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3:-:::::::* cpe:2.3:o:siemens:simatic_s7-1200_cpu_12_1211c_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516pro_f_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1:-:::::::* cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_151511f-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_151511c-1_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro_f:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_firmware:::::::: cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware:::::::: cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516tf-3:-:::::::* cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_firmware:::::::: cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_firmware::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8

11 Oct 2022, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-10-11 11:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-38465

Mitre link : CVE-2022-38465

CVE.ORG link : CVE-2022-38465

JSON object : View

Products Affected

siemens

simatic_s7-1500_cpu_1515r-2_firmware
simatic_s7-1500_cpu_1516f-3
simatic_s7-1500_cpu_1512sp-1_firmware
simatic_drive_controller_cpu_1504d_tf_firmware
simatic_s7-1500_cpu_1517f-3_firmware
simatic_s7-1500_cpu_1512c-1
simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware
simatic_s7-1500_cpu_1516tf-3
simatic_s7-1500_cpu_1518t-4_firmware
simatic_s7-1500_cpu_15pro-2_firmware
simatic_s7-1500_cpu_1516pro_f
simatic_drive_controller_cpu_1504d_tf
simatic_s7-1500_cpu_1516tf-3_firmware
simatic_drive_controller_cpu_1507d_tf
simatic_s7-1500_cpu_1512c-1_firmware
simatic_s7-1200_cpu_12_1214c_firmware
simatic_s7-1500_cpu_1518f-4_firmware
simatic_s7-1500_cpu_1511-1
simatic_s7-1500_cpu_1510sp-1
simatic_s7-1500_cpu_1518tf-4
simatic_s7-1500_cpu_1516t-3
simatic_s7-plcsim_advanced_firmware
simatic_s7-1200_cpu_12_1215fc
simatic_s7-1500_cpu_1517f-3
simatic_s7-1500_cpu_1513-1_firmware
simatic_s7-1500_cpu_1517-3_firmware
simatic_s7-1200_cpu_12_1212c_firmware
simatic_s7-1500_cpu_1515r-2
simatic_s7-1500_cpu_1513r-1
simatic_s7-1500_cpu_1511tf-1
simatic_s7-1200_cpu_12_1215c_firmware
simatic_s7-1500_cpu_151511f-1_firmware
simatic_s7-1200_cpu_12_1211c
simatic_s7-1500_software_controller
simatic_s7-1500_cpu_15prof-2
simatic_drive_controller_cpu_1507d_tf_firmware
simatic_s7-1500_cpu_1515-2_firmware
simatic_s7-1500_cpu_151511c-1_firmware
simatic_s7-1500_cpu_15pro-2
simatic_s7-1500_cpu_1515t-2_firmware
simatic_s7-1200_cpu_12_1212c
simatic_s7-1200_cpu_12_1212fc_firmware
simatic_s7-1500_cpu_1511t-1_firmware
simatic_s7-1200_cpu_12_1214fc_firmware
simatic_s7-1200_cpu_12_1214c
simatic_s7-plcsim_advanced
simatic_s7-1500_cpu_1511-1_firmware
simatic_s7-1200_cpu_12_1215c
simatic_s7-1500_cpu_1513f-1
simatic_s7-1500_cpu_1518t-4
simatic_s7-1500_cpu_1515f-2
simatic_s7-1500_cpu_1511tf-1_firmware
simatic_s7-1200_cpu_12_1214fc
simatic_s7-1500_cpu_1513f-1_firmware
simatic_et_200_open_controller_cpu_1515sp_pc2
simatic_s7-1500_cpu_1518-4_firmware
simatic_et_200_open_controller_cpu_1515sp_pc
simatic_s7-1500_cpu_1516pro_f_firmware
simatic_s7-1500_cpu_15prof-2_firmware
simatic_s7-1200_cpu_12_1215fc_firmware
simatic_s7-1500_cpu_1510sp-1_firmware
simatic_s7-1500_cpu_1510sp
simatic_s7-1500_cpu_1512spf-1
simatic_s7-1500_cpu_1518hf-4_firmware
simatic_s7-1500_cpu_1516t-3_firmware
simatic_s7-1500_cpu_1515-2
simatic_s7-1500_cpu_1518-4
simatic_s7-1500_cpu_151511f-1
simatic_s7-1500_cpu_1518hf-4
simatic_s7-1500_cpu_1517-3
simatic_s7-1200_cpu_12_1212fc
simatic_s7-1500_cpu_1513-1
simatic_s7-1500_cpu_1518tf-4_firmware
simatic_s7-1500_cpu_151511c-1
simatic_s7-1500_cpu_1512spf-1_firmware
simatic_s7-1500_cpu_1513r-1_firmware
simatic_s7-1500_cpu_1516f-3_firmware
simatic_s7-1200_cpu_12_1217c
simatic_s7-1500_cpu_1511t-1
simatic_s7-1500_cpu_1515f-2_firmware
simatic_s7-1500_cpu_1516-3_firmware
simatic_s7-1200_cpu_12_1211c_firmware
simatic_s7-1200_cpu_12_1217c_firmware
simatic_s7-1500_cpu_1516-3
simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware
simatic_s7-1500_cpu_1518f-4
simatic_s7-1500_cpu_1512sp-1
simatic_s7-1500_cpu_1515t-2
simatic_s7-1500_cpu_1510sp_firmware

CWE

CWE-522

Insufficiently Protected Credentials

7.8 /10