VULNERABILITY INTELLIGENCE

CVE-2022-38773

CVSS score4.6 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2023-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.

Weakness classification

  • productcert@siemens.com: CWE-1326
  • nvd@nist.gov: NVD-CWE-Other

Primary references