CVE-2022-38465 | Siemens SIMATIC Drive Controller Global Key insufficiently protected credentials (ssa-568427 / EUVD-2022-41048)

A vulnerability has been found in Siemens SIMATIC Drive Controller, SIMATIC ET 200SP Open Controller CPU 1515SP PC, SIMATIC ET 200SP Open Controller CPU 1515SP PC2, SIMATIC S7-1200 CPU, SIMATIC S7-1500 CPU, SIMATIC S7-1500 Software Controller and SIMATIC S7-PLCSIM Advanced and classified as problematic. This issue affects some unknown processing of the component Global Key Handler. Performing a manipulation results in insufficiently protected credentials. This vulnerability was named CVE-2022-38465. The attack needs to be approached within the local network. There is no available exploit. The affected component should be upgraded.