Description
Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC Drive Controller CPU 1504D TF | — | — |
| Siemens | SIMATIC Drive Controller CPU 1507D TF | — | — |
| Siemens | SIMATIC S7-1500 CPU 1510SP F-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1510SP-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1511-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1511C-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1511F-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1511T-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1511TF-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1512C-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1512SP F-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1512SP-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1513-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1513F-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1513R-1 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1515-2 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1515F-2 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1515R-2 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1515T-2 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1515TF-2 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1516-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1516F-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1516T-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1516TF-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1517-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1517F-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1517H-3 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1517T-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1517TF-3 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518HF-4 PN | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518T-4 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU 1518TF-4 PN/DP | — | — |
| Siemens | SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK | — | — |
| Siemens | SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK | — | — |
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN | — | — |
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN | — | — |
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN | — | — |
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN | — | — |
| Siemens | SIPLUS ET 200SP CPU 1510SP F-1 PN | — | — |
| Siemens | SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL | — | — |
| Siemens | SIPLUS ET 200SP CPU 1510SP-1 PN | — | — |
| Siemens | SIPLUS ET 200SP CPU 1510SP-1 PN RAIL | — | — |
| Siemens | SIPLUS ET 200SP CPU 1512SP F-1 PN | — | — |
| Siemens | SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL | — | — |
| Siemens | SIPLUS ET 200SP CPU 1512SP-1 PN | — | — |
| Siemens | SIPLUS ET 200SP CPU 1512SP-1 PN RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1511-1 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1511-1 PN TX RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1511F-1 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1513-1 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1513F-1 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1515F-2 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1515F-2 PN RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1515R-2 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1516-3 PN/DP | — | — |
| Siemens | SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1516F-3 PN/DP | — | — |
| Siemens | SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL | — | — |
| Siemens | SIPLUS S7-1500 CPU 1517H-3 PN | — | — |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP | — | — |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | — | — |
| Siemens | SIPLUS S7-1500 CPU 1518F-4 PN/DP | — | — |
| Siemens | SIPLUS S7-1500 CPU 1518HF-4 PN | — | — |
Advisories 3
- ICSA-23-012-08 Siemens S7-1500 CPU devices CISA ICS & IT advisories · Jan 14, 2025
- SSA-482757 SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices Siemens ProductCERT · Jan 14, 2025
- WID-SEC-2023-0047 Siemens SIMATIC S7: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jan 9, 2023