Medium severity · published Dec 13, 2022
CVE-2022-46142
Affected devices store the CLI user passwords encrypted in flash memory
5.7
CVSS
0.3%
EPSS
No
On KEV
Description
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
Ruggedcom Rm1224 Lte(4g) EU Firmware · Siemens
All versions, or not specified · source: NVD
RR
Ruggedcom Rm1224 Lte(4g) Nam Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M804pb Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M812-1 Adsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M816-1 Adsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M826-2 Shdsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M874-2 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M874-3 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M876-3 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M876-4 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance Mum853-1 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance Mum856-1 Firmware · Siemens
All versions, or not specified · source: NVD
Affected product
RR
Ruggedcom Rm1224 Lte(4g) EU Firmware
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46142
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46142
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-413565.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
More from Ruggedcom Rm1224 Lte(4g) EU Firmware
9.8
CVE-2024-50557
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
8.8
CVE-2024-41976
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
8.0
CVE-2024-41977
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
7.2
CVE-2024-50572
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
6.5
CVE-2024-41978
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…