Lucene search
K

EUVD-2022-41048

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 4 Views

Vulnerability in SIMATIC Drive Controller and related devices allows offline attacks to expose private keys.

Related
Affected
Refs
[
  {
    "enisaIdVendor": [
      {
        "id": "0ed6746f-c8f6-3fe8-a730-d44a6d11fd14",
        "vendor": {
          "name": "Siemens"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0de56908-e621-37e0-b0aa-6cfe5fc2b40a",
        "product": {
          "name": "SIMATIC S7-1500 Software Controller"
        },
        "product_version": "All versions < V21.9"
      },
      {
        "id": "497c6e96-742e-3664-99bb-65b0a82b12ac",
        "product": {
          "name": "SIMATIC S7-PLCSIM Advanced"
        },
        "product_version": "All versions < V4.0"
      },
      {
        "id": "b65c41ff-f5ae-351f-89fe-8eb46b7d1f5f",
        "product": {
          "name": "SINUMERIK ONE"
        },
        "product_version": "All versions < V6.21"
      },
      {
        "id": "c770328a-ce3e-3301-8263-24b1c6df7b21",
        "product": {
          "name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)"
        },
        "product_version": "All versions"
      },
      {
        "id": "ca3d8b52-d9bc-37e5-a58b-f16c3f5fd018",
        "product": {
          "name": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)"
        },
        "product_version": "All versions < V4.5.0"
      },
      {
        "id": "e2bfd4f0-c9af-35c4-9247-c77fa1f3f599",
        "product": {
          "name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)"
        },
        "product_version": "All versions < V21.9"
      },
      {
        "id": "e971e606-f612-3598-bf0c-91ab41fe4a88",
        "product": {
          "name": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)"
        },
        "product_version": "All versions < V2.9.2"
      },
      {
        "id": "eca8e408-8812-37a0-9d0c-0793673a722e",
        "product": {
          "name": "SIMATIC Drive Controller family"
        },
        "product_version": "All versions < V2.9.2"
      },
      {
        "id": "ed23dd57-2804-3978-b4b5-db404225bcb9",
        "product": {
          "name": "SINUMERIK MC"
        },
        "product_version": "All versions < V6.21"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
7.6High risk
Vulners AI Score7.6
CVSS 3.17.8 - 9.3
EPSS0.00155
SSVC
4