CVE-2022-38773

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity...

4.6 Medium

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Attack profile

How easy it is to exploit

Attack vector: Physical
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

0.30%Down 0.7 points since Jan 11, 2023

What each source reports

CVE List Score used 4.6

Record: CVE-2022-38773
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C
Weakness: CWE-1326
Updated: 2026-11-02

EUVDEUVD-2022-41336 4.6

Record: EUVD-2022-41336
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C
Updated: 2026-11-02

GitHub AdvisoriesGHSA-4qpv-c2wc-cr4r 6.8

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity...

Record: GHSA-4qpv-c2wc-cr4r
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-1326
Updated: 2026-11-02

NVD 4.6

Record: CVE-2022-38773
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-1326
Updated: 2026-11-02

Affected products

Show 129 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-38773 is a medium vulnerability (CVSS 4.6) in Siemens Simatic Drive Controller Cpu 1504d Tf, published January 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.