CVEvulnerability

CVE-2022-46140

7.1 HIGH Published 2022-12-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.1 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-327

Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Affected configurations

• siemens ruggedcom rm1224 lte\(4g\) eu firmware • siemens ruggedcom rm1224 lte\(4g\) nam firmware • siemens scalance m804pb firmware • siemens scalance m812-1 adsl-router firmware • siemens scalance m816-1 adsl-router firmware • siemens scalance m826-2 shdsl-router firmware • siemens scalance m874-2 firmware • siemens scalance m874-3 firmware • siemens scalance m876-3 firmware • siemens scalance m876-4 firmware • siemens scalance mum853-1 firmware • siemens scalance mum856-1 firmware • siemens scalance s615 firmware • siemens scalance s615 eec firmware • siemens scalance sc622-2c firmware (< 2.3) • siemens scalance sc626-2c firmware (< 2.3) • siemens scalance sc632-2c firmware (< 2.3) • siemens scalance sc636-2c firmware (< 2.3) • siemens scalance sc642-2c firmware (< 2.3) • siemens scalance sc646-2c firmware (< 2.3) • siemens scalance w721-1 rj45 firmware • siemens scalance w722-1 rj45 firmware • siemens scalance w734-1 rj45 firmware • siemens scalance w738-1 m12 firmware • siemens scalance w748-1 m12 firmware • siemens scalance w761-1 rj45 firmware • siemens scalance w774-1 m12 eec firmware • siemens scalance w774-1 m12 rj45 firmware • siemens scalance w774-1 rj45 firmware • siemens scalance w778-1 m12 firmware • siemens scalance w778-1 m12 eec firmware • siemens scalance w786-1 rj45 firmware • siemens scalance w786-2 rj45 firmware • siemens scalance w786-2 sfp firmware • siemens scalance w786-2ia rj45 firmware • siemens scalance w788-1 m12 firmware • siemens scalance w788-1 rj45 firmware • siemens scalance w788-2 m12 firmware • siemens scalance w788-2 m12 eec firmware • siemens scalance w1748-1 m12 firmware • siemens scalance w1788-1 m12 firmware • siemens scalance w1788-2 eec m12 firmware • siemens scalance w1788-2 m12 firmware • siemens scalance w1788-2ia m12 firmware • siemens scalance wam763-1 firmware • siemens scalance wam766-1 firmware • siemens scalance wam766-1 6ghz firmware • siemens scalance wam766-1 ecc firmware • siemens scalance wum763-1 firmware • siemens scalance wum766-1 firmware • siemens scalance wum766-1 6ghz firmware • siemens scalance xb205-3 firmware • siemens scalance xb205-3ld firmware • siemens scalance xb208 firmware • siemens scalance xb213-3 firmware • siemens scalance xb213-3ld firmware • siemens scalance xb216 firmware • siemens scalance xc206-2 firmware • siemens scalance xc206-2g poe firmware • siemens scalance xc206-2g poe eec firmware … and 41 more

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References