CVE-2022-46143
Low
Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
SeverityLow
CVSS2.7
Exploit probability—
ProductSiemens Ruggedcom Rm1224 Lte\(4g\) Eu Firmware
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-1284CWE-1284
How to fix
Update
- siemens scalance_sc622-2c_firmware2.3 or later
- siemens scalance_sc626-2c_firmware2.3 or later
- siemens scalance_sc632-2c_firmware2.3 or later
- siemens scalance_sc636-2c_firmware2.3 or later
- siemens scalance_sc642-2c_firmware2.3 or later
- siemens scalance_sc646-2c_firmware2.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware | No range specified | — |
| siemens ruggedcom_rm1224_lte\(4g\)_nam_firmware | No range specified | — |
| siemens scalance_m804pb_firmware | No range specified | — |
| siemens scalance_m812-1_adsl-router_firmware | No range specified | — |
| siemens scalance_m816-1_adsl-router_firmware | No range specified | — |
| siemens scalance_m826-2_shdsl-router_firmware | No range specified | — |
| siemens scalance_m874-2_firmware | No range specified | — |
| siemens scalance_m874-3_firmware | No range specified | — |
| siemens scalance_m876-3_firmware | No range specified | — |
| siemens scalance_m876-4_firmware | No range specified | — |
| siemens scalance_mum853-1_firmware | No range specified | — |
| siemens scalance_mum856-1_firmware | No range specified | — |
| siemens scalance_s615_firmware | No range specified | — |
| siemens scalance_s615_eec_firmware | No range specified | — |
| siemens scalance_sc622-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_sc626-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_sc632-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_sc636-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_sc642-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_sc646-2c_firmware | v < 2.3 | 2.3 |
| siemens scalance_w721-1_rj45_firmware | No range specified | — |
| siemens scalance_w722-1_rj45_firmware | No range specified | — |
| siemens scalance_w734-1_rj45_firmware | No range specified | — |
| siemens scalance_w738-1_m12_firmware | No range specified | — |
| siemens scalance_w748-1_m12_firmware | No range specified | — |
| siemens scalance_w761-1_rj45_firmware | No range specified | — |
| siemens scalance_w774-1_m12_eec_firmware | No range specified | — |
| siemens scalance_w774-1_m12_rj45_firmware | No range specified | — |
| siemens scalance_w774-1_rj45_firmware | No range specified | — |
| siemens scalance_w778-1_m12_firmware | No range specified | — |
| siemens scalance_w778-1_m12_eec_firmware | No range specified | — |
| siemens scalance_w786-1_rj45_firmware | No range specified | — |
| siemens scalance_w786-2_rj45_firmware | No range specified | — |
| siemens scalance_w786-2_sfp_firmware | No range specified | — |
| siemens scalance_w786-2ia_rj45_firmware | No range specified | — |
| siemens scalance_w788-1_m12_firmware | No range specified | — |
| siemens scalance_w788-1_rj45_firmware | No range specified | — |
| siemens scalance_w788-2_m12_firmware | No range specified | — |
| siemens scalance_w788-2_m12_eec_firmware | No range specified | — |
| siemens scalance_w1748-1_m12_firmware | No range specified | — |
| siemens scalance_w1788-1_m12_firmware | No range specified | — |
| siemens scalance_w1788-2_eec_m12_firmware | No range specified | — |
| siemens scalance_w1788-2_m12_firmware | No range specified | — |
| siemens scalance_w1788-2ia_m12_firmware | No range specified | — |
| siemens scalance_wam763-1_firmware | No range specified | — |
| siemens scalance_wam766-1_firmware | No range specified | — |
| siemens scalance_wam766-1_6ghz_firmware | No range specified | — |
| siemens scalance_wam766-1_ecc_firmware | No range specified | — |
| siemens scalance_wum763-1_firmware | No range specified | — |
| siemens scalance_wum766-1_firmware | No range specified | — |
| siemens scalance_wum766-1_6ghz_firmware | No range specified | — |
| siemens scalance_xb205-3_firmware | No range specified | — |
| siemens scalance_xb205-3ld_firmware | No range specified | — |
| siemens scalance_xb208_firmware | No range specified | — |
| siemens scalance_xb213-3_firmware | No range specified | — |
| siemens scalance_xb213-3ld_firmware | No range specified | — |
| siemens scalance_xb216_firmware | No range specified | — |
| siemens scalance_xc206-2_firmware | No range specified | — |
| siemens scalance_xc206-2g_poe_firmware | No range specified | — |
| siemens scalance_xc206-2g_poe_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_eec_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_firmware | No range specified | — |
| siemens scalance_xc206-2sfp_g_eec_firmware | No range specified | — |
| siemens scalance_xc208_firmware | No range specified | — |
| siemens scalance_xc208_eec_firmware | No range specified | — |
| siemens scalance_xc208_poe_firmware | No range specified | — |
| siemens scalance_xc216_firmware | No range specified | — |
| siemens scalance_xc216-3g_poe_firmware | No range specified | — |
| siemens scalance_xc216-4c_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_firmware | No range specified | — |
| siemens scalance_xc216-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xc216eec_firmware | No range specified | — |
| siemens scalance_xc224_firmware | No range specified | — |
| siemens scalance_xc224-4c_g_firmware | No range specified | — |
| siemens scalance_xc224-4c_g_eec_firmware | No range specified | — |
| siemens scalance_xf204_firmware | No range specified | — |
| siemens scalance_xf204_dna_firmware | No range specified | — |
| siemens scalance_xf204-2ba_firmware | No range specified | — |
| siemens scalance_xf204-2bca_dna_firmware | No range specified | — |
| siemens scalance_xm408-4c_firmware | No range specified | — |
| siemens scalance_xm408-8c_firmware | No range specified | — |
| siemens scalance_xm416-4c_firmware | No range specified | — |
| siemens scalance_xp208_firmware | No range specified | — |
| siemens scalance_xp208eec_firmware | No range specified | — |
| siemens scalance_xp208poe_eec_firmware | No range specified | — |
| siemens scalance_xp216_firmware | No range specified | — |
| siemens scalance_xp216eec_firmware | No range specified | — |
| siemens scalance_xp216poe_eec_firmware | No range specified | — |
| siemens scalance_xr324wg_firmware | No range specified | — |
| siemens scalance_xr326-2c_firmware | No range specified | — |
| siemens scalance_xr326-2c_poe_firmware | No range specified | — |
| siemens scalance_xr328-4c_wg_firmware | No range specified | — |
| siemens scalance_xr524-8c_firmware | No range specified | — |
| siemens scalance_xr526-8c_firmware | No range specified | — |
| siemens scalance_xr528-6m_firmware | No range specified | — |
| siemens scalance_xr552-12m_firmware | No range specified | — |
| siemens siplus_net_scalance_xc206-2_firmware | No range specified | — |
| siemens siplus_net_scalance_xc206-2sfp_firmware | No range specified | — |
| siemens siplus_net_scalance_xc208_firmware | No range specified | — |
| siemens siplus_net_scalance_xc216-4c_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.