{"id":"CVE-2022-38773","aliases":["EUVD-2022-41336","GHSA-4qpv-c2wc-cr4r"],"status":"published","title":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity...","description":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00305,"percentile":0.23478,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1326"],"published":"2023-01-10T11:39:37Z","modified":"2026-06-17T04:57:08Z","products":[{"vendor":"siemens","product":"simatic drive controller cpu 1504d tf"},{"vendor":"siemens","product":"simatic drive controller cpu 1507d tf"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1510sp f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1510sp-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511c-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511t-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1511tf-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1512c-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1512sp f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1512sp-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513f-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1513r-1 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515r-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515t-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1515tf-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516f-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516t-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1516tf-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517f-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517h-3 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517t-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1517tf-3 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518hf-4 pn"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518t-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518tf-4 pn/dp"},{"vendor":"siemens","product":"simatic s7-1500 cpu s7-1518-4 pn/dp odk"},{"vendor":"siemens","product":"simatic s7-1500 cpu s7-1518f-4 pn/dp odk"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1513pro f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1513pro-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1516pro f-2 pn"},{"vendor":"siemens","product":"simatic s7-1500 et 200pro: cpu 1516pro-2 pn"},{"vendor":"siemens","product":"simatic_drive_controller_cpu_1504d_tf_firmware"},{"vendor":"siemens","product":"simatic_drive_controller_cpu_1507d_tf_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1510sp-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1510sp_f-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1511-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1511c-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1511f-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1511t-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1511tf-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1512c-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1512sp-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1512sp_f-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1513-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1513f-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1513pro-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1513pro_f-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1513r-1_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1515-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1515f-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1515r-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1515t-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1515tf-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516f-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516pro-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516pro_f-2_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516t-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1516tf-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1517-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1517f-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1517h-3_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1517t-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1517tf-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518-4_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518-4f_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518hf-4_pn_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518t-4_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518tf-4_pn\\/dp_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_s7-1518-4_pn\\/dp_odk_firmware"},{"vendor":"siemens","product":"simatic_s7-1500_cpu_s7-1518f-4_pn\\/dp_odk_firmware"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp f-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp f-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1510sp-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp f-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp f-1 pn rail"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp-1 pn"},{"vendor":"siemens","product":"siplus et 200sp cpu 1512sp-1 pn rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn t1 rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511-1 pn tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1511f-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1513-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1513f-1 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515f-2 pn t2 rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515r-2 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1515r-2 pn tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516-3 pn/dp tx rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516f-3 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1516f-3 pn/dp rail"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1517h-3 pn"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518f-4 pn/dp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518hf-4 pn"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1510sp-1_pn_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1510sp-1_pn_rail_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1510sp_f-1_pn_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1512sp-1_pn_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1512sp-1_pn_rail_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1512sp_f-1_pn_firmware"},{"vendor":"siemens","product":"siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1511-1_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1511f-1_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1513-1_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1513f-1_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1515f-2_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1515f-2_pn_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1515r-2_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1516-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1516-3_pn\\/dp_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1516-3_pn\\/dp_tx_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1516f-3_pn\\/dp_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1516f-3_pn\\/dp_rail_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1517h-3_pn_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1518-4_pn\\/dp_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware"},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1518f-4_pn\\/dp_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-482757.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-482757.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38773"},{"url":"https://github.com/advisories/GHSA-4qpv-c2wc-cr4r"}],"sources":{"cve":[{"id":"CVE-2022-38773","description":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.","status":"published","published":"2023-01-10T11:39:37.547Z","modified":"2025-04-03T15:37:09.647Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:34:37.272373Z"}],"euvd":[{"id":"EUVD-2022-41336","description":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.","status":"published","published":"2023-01-10T11:39:37Z","modified":"2025-04-03T15:37:09Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C","level":"medium"}],"updated_at":"2026-11-02T20:52:43.853284Z"}],"ghsa":[{"id":"GHSA-4qpv-c2wc-cr4r","title":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity...","description":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.","status":"published","published":"2023-01-10T12:30:23Z","modified":"2024-06-11T09:30:53Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:57:27.150795Z"}],"nvd":[{"id":"CVE-2022-38773","description":"Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.","status":"published","published":"2023-01-10T12:15:23.103Z","modified":"2026-06-17T04:57:08.797Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-1326"],"updated_at":"2026-11-02T14:07:35.157734Z"}]}}