Low severity · published Dec 13, 2022
CVE-2022-46143
Affected devices do not check the TFTP blocksize correctly
2.7
CVSS
0.7%
EPSS
No
On KEV
Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
Ruggedcom Rm1224 Lte(4g) EU Firmware · Siemens
All versions, or not specified · source: NVD
RR
Ruggedcom Rm1224 Lte(4g) Nam Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M804pb Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M812-1 Adsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M816-1 Adsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M826-2 Shdsl-router Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M874-2 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M874-3 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M876-3 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance M876-4 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance Mum853-1 Firmware · Siemens
All versions, or not specified · source: NVD
SM
Scalance Mum856-1 Firmware · Siemens
All versions, or not specified · source: NVD
Affected product
RR
Ruggedcom Rm1224 Lte(4g) EU Firmware
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46143
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-180704.html
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-413565.html
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
More from Ruggedcom Rm1224 Lte(4g) EU Firmware
9.8
CVE-2024-50557
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
8.8
CVE-2024-41976
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
8.0
CVE-2024-41977
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
7.2
CVE-2024-50572
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…
6.5
CVE-2024-41978
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions <…