WID-SEC-W-2023-0047

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Siemens SIMATIC S7: Schwachstelle ermöglicht Codeausführung

view advisory published 2023-01-09

Ein physischer Angreifer kann eine Schwachstelle in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-38773USmedium6.8—
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacke…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan