Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINUMERIK MC (All versions < V6.21), SINUMERIK ONE (All versions < V6.21). Affected products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI communication. This could allow attackers to discover the private key of a CPU product family by an offline attack against a single CPU of the family. Attackers could then use this knowledge to extract confidential configuration data from projects that are protected by that key or to perform attacks against legacy PG/PC and HMI communication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 89 products
ちなみにこのSIMATIC S7-1200はグローバル秘密鍵保護不備の脆弱性(CVE-2022-38465、CVSS v3.1: 9.3 / Critical)がある 攻撃者が個人的に購入したPLCから秘密鍵を入手して、同一の型のPLCに対して秘密鍵を流用し、機密構成データの抽出や、PG/PCとHMI間の通信での中間者攻撃による傍受や改竄ができる https://t.co/ewU0zKBct1
ただし、この脆弱性の保護のためには、2021年春以降に登場している「TIA Portal V17」以降の環境を使ってプロジェクト自体の通信暗号化（TLS保護）設定を行うことが必須要件 https://app.opencve.io/cve/CVE-2022-38465
89 of 89 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | siemens | simatic_drive_controller_cpu_1504d_tf | - | - | - |
| OS | siemens | simatic_drive_controller_cpu_1504d_tf_firmware | - | - | - |
| HW | siemens | simatic_drive_controller_cpu_1507d_tf | - | - | - |
| OS | siemens | simatic_drive_controller_cpu_1507d_tf_firmware | - | - | - |
| HW | siemens | simatic_et_200_open_controller_cpu_1515sp_pc | - | - | - |
| HW | siemens | simatic_et_200_open_controller_cpu_1515sp_pc2 | - | - | - |
| OS | siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware | - | - | - |
| OS | siemens | simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1211c | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1211c_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1212c | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1212c_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1212fc | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1212fc_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1214c | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1214c_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1214fc | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1214fc_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1215c | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1215c_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1215fc | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1215fc_firmware | - | - | - |
| HW | siemens | simatic_s7-1200_cpu_12_1217c | - | - | - |
| OS | siemens | simatic_s7-1200_cpu_12_1217c_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1510sp | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1510sp-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1510sp-1_firmware | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1510sp_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1511-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1511-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1511t-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1511t-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1511tf-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1511tf-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1512c-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1512c-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1512sp-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1512sp-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1512spf-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1512spf-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1513-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1513-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1513f-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1513f-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1513r-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1513r-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1515-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1515-2_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_151511c-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_151511c-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_151511f-1 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_151511f-1_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1515f-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1515f-2_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1515r-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1515r-2_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1515t-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1515t-2_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1516-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1516-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1516f-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1516f-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1516pro_f | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1516pro_f_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1516t-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1516t-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1516tf-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1516tf-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1517-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1517-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1517f-3 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1517f-3_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1518-4 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1518-4_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1518f-4 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1518f-4_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1518hf-4 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1518hf-4_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1518t-4 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1518t-4_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_1518tf-4 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_1518tf-4_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_15pro-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_15pro-2_firmware | - | - | - |
| HW | siemens | simatic_s7-1500_cpu_15prof-2 | - | - | - |
| OS | siemens | simatic_s7-1500_cpu_15prof-2_firmware | - | - | - |
| App | siemens | simatic_s7-1500_software_controller | - | - | - |
| HW | siemens | simatic_s7-plcsim_advanced | - | - | - |
| OS | siemens | simatic_s7-plcsim_advanced_firmware | - | - | - |