CVE-2022-38465

highPriorität · verfolgen · 31EPSS 0.002 · 15. PerzentilDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.24% (15th) EPSS
CVSS 7.8 · high
Is it mine?
81 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSIMATIC Drive Controller familysiemens_psirt

    Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109773914/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)siemens_psirt

    Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)siemens_psirt

    Update to V4.5.0 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)siemens_psirt

    Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • BehobenSIMATIC S7-1500 Software Controllersiemens_psirt

    Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109478528/
  • BehobenSIMATIC S7-PLCSIM Advancedsiemens_psirt

    Update to V4.0 or later version, migrate project in TIA Portal to the corresponding version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109795016/
  • BehobenSINUMERIK MCsiemens_psirt

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

  • BehobenSINUMERIK ONEsiemens_psirt

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

  • BehobenSIMATIC Drive Controller familycisa_csaf_ot

    Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109773914/
  • BehobenSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)cisa_csaf_ot

    Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109759122/
  • BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)cisa_csaf_ot

    Update to V4.5.0 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109793280/
  • BehobenSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cisa_csaf_ot

    Update to V2.9.2 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • BehobenSIMATIC S7-1500 Software Controllercisa_csaf_ot

    Update to V21.9 or later version, migrate project in TIA Portal to this version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109478528/
  • BehobenSIMATIC S7-PLCSIM Advancedcisa_csaf_ot

    Update to V4.0 or later version, migrate project in TIA Portal to the corresponding version and redeploy.

    https://support.industry.siemens.com/cs/ww/en/view/109795016/
  • BehobenSINUMERIK MCcisa_csaf_ot

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

  • BehobenSINUMERIK ONEcisa_csaf_ot

    Update to V6.21 or later version SINUMERIK software can be obtained from your local Siemens account manager.

  • MitigationSIMATIC Drive Controller familysiemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)siemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)siemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)siemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)siemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1500 Software Controllersiemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-PLCSIM Advancedsiemens_psirt

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSINUMERIK MCsiemens_psirt

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • MitigationSINUMERIK ONEsiemens_psirt

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • MitigationSIMATIC Drive Controller familycisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)cisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)cisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)cisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-1500 Software Controllercisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSIMATIC S7-PLCSIM Advancedcisa_csaf_ot

    Protect access to the TIA Portal project and CPU (including related memory cards) from unauthorized actors

  • MitigationSINUMERIK MCcisa_csaf_ot

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • MitigationSINUMERIK ONEcisa_csaf_ot

    Expose the communication between the S7-1500 CPU and the HMI of the affected products only to trusted network environments

  • Kein Fix geplantSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.1–9.3

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.19.3criticalAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU
v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 2.5 · Auswirkung 6
v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-522USCWE-522USCWE-522USCWE-522US
05

betroffene Produkte (81)

Betroffene Produkte und Versionsbereiche.

20 von 81 angezeigt
06

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-568427SSA-568427: Weak Key Protection Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families2022-10-11csaf · siemens_psirtDE

    SIMATIC S7-1200, S7-1500 CPUs and related products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication. Siemens recommends to update both the affected products as well as the corresponding TIA Portal project to the latest versions. TIA Portal V17 and related CPU firmware versions introduced protection of confidential configuration data based on individual passwords per device and TLS-protected PG/PC and HMI communication. Additional details can be found in the related Siemens security bulletin SSB-898115 ( https://cert-portal.siemens.com/productcert/html/ssb-898115.html).

  • SSA-568428SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC2022-11-08csaf · siemens_psirtDE

    SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-568427.html

  • ICSA-22-286-04Siemens SIMATIC S7-1200 and S7-1500 CPU Families2022-10-11icsa · cisa_csaf_otUS

    SIMATIC S7-1200, S7-1500 CPUs and related products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication. Siemens recommends to update both the affected products as well as the corresponding TIA Portal project to the latest versions. TIA Portal V17 and related CPU firmware versions introduced protection of confidential configuration data based on individual passwords per device and TLS-protected PG/PC and HMI communication. Additional details can be found in the related Siemens security bulletin SSB-898115 ( https://cert-portal.siemens.com/productcert/html/ssb-898115.html).

  • ICSA-22-314-04Siemens SINUMERIK ONE and SINUMERIK MC2022-11-08icsa · cisa_csaf_otUS

    SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-568427.html

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2022-10-11geändert 2026-06-17
09

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan