Siemens SIMATIC Drive Controller CPU 1504D TF
At a glance
- Source
- NVD
- EPSS
- EPSS 0.30 % · percentile 23 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- siemens
- NVD status
- Modified
Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Weaknesses (CWE)
- CWE-1326 — Missing Immutable Root of Trust in Hardware
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.6 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:T/RC:C | siemens |
| CVSS 3.1 | MEDIUM 4.6 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | NVD · productcert@siemens.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.8 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-41336
- GCVE · GCVE-0-2022-38773
CERT-FR advisories
- CERTFR-2023-AVI-0015 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp_f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515tf-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517h-3_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517t-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4f_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513pro_f-2_pn_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513pro-2_pn_firmware:-:*:*:*:*:*:*:*- +30 more
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |