CVE-2022-38465

HIGH

7.8

CVSS Score

Published: October 11, 2022 at 12:00 AM UTC

Updated: June 17, 2026 at 04:56 AM UTC

96 products affected across 1 vendorSIMATIC S7-1500 Software ControllerSIMATIC Drive Controller CPU 1504D Tf FirmwareSIMATIC Drive Controller CPU 1507D Tf Firmware

Using SIMATIC Drive Controller family by Siemens?

Get instant alerts when new vulnerabilities affect SIMATIC Drive Controller family - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

SIMATIC Drive Controller CPU 1504D Tf Firmware · Siemens

95%

v < 2.9.2

Affected range stops below 2.9.2, so it looks safe — our inference, not a vendor statement

siemens-simatic-drive-controller-cpu-1504d-tf (same device)

SIMATIC Drive Controller CPU 1507D Tf Firmware · Siemens

95%

v < 2.9.2

Affected range stops below 2.9.2, so it looks safe — our inference, not a vendor statement

siemens-simatic-drive-controller-cpu-1507d-tf (same device)

SIMATIC Et 200 Sp Open Controller CPU 1515SP Pc Firmware · Siemens

95%

All versions

siemens-simatic-et-200-open-controller-cpu-1515sp-pc (environment)

SIMATIC Et 200SP Open Controller CPU 1515SP PC2 Firmware · Siemens

95%

v < 21.9

Affected range stops below 21.9, so it looks safe — our inference, not a vendor statement

siemens-simatic-et-200-open-controller-cpu-1515sp-pc2 (environment)

SIMATIC S7-1200 CPU 12 1211C Firmware · Siemens

95%

v < 4.5.0