synced 14 MIN AGO
01 Record

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

MediumPUBLISHEDCNA: siemens
CNA base score5.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

02 Description

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
0.74% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 54.2% of scored records. A rank, not a probability.
NVD base score
5.1 (CVSS v4.0), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2022-12-13 00:00Z3 YR AGO
Last updated
2025-01-14 10:27Z1 YR AGO
Reserved
2022-11-28
Assigning CNA
siemens
Record state
PUBLISHED
Severity
Medium (CVSS 5.1)
CNA CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
  • CWE-1284Improper Validation of Specified Quantity in InputBase
Data version
5.1
Document digest
9dccbd552558dd8654eea0b86a2d7616187eb146d37a7eb15b9d5f712af2fa52

05 Affected products

VendorProductVersionsPlatforms
SiemensRUGGEDCOM RM1224 LTE(4G) EU0 to < V7.2, 0 to < V8.0—
SiemensRUGGEDCOM RM1224 LTE(4G) NAM0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M804PB0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M812-1 ADSL-Router0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M816-1 ADSL-Router0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M826-2 SHDSL-Router0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M874-20 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M874-30 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M876-30 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M876-3 (ROK)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M876-40 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M876-4 (EU)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE M876-4 (NAM)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE MUM853-1 (EU)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE MUM856-1 (EU)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE MUM856-1 (RoW)0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE S615 EEC LAN-Router0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE S615 LAN-Router0 to < V7.2, 0 to < V8.0—
SiemensSCALANCE SC622-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE SC626-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE SC632-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE SC636-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE SC642-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE SC646-2C0 to < V2.3, V2.3 to < V3.0—
SiemensSCALANCE W1748-1 M120 to < *—
SiemensSCALANCE W1788-1 M120 to < *—
SiemensSCALANCE W1788-2 EEC M120 to < *—
SiemensSCALANCE W1788-2 M120 to < *—
SiemensSCALANCE W1788-2IA M120 to < *—
SiemensSCALANCE W721-1 RJ450 to < *—
SiemensSCALANCE W722-1 RJ450 to < *—
SiemensSCALANCE W734-1 RJ450 to < *—
SiemensSCALANCE W734-1 RJ45 (USA)0 to < *—
SiemensSCALANCE W738-1 M120 to < *—
SiemensSCALANCE W748-1 M120 to < *—
SiemensSCALANCE W748-1 RJ450 to < *—
SiemensSCALANCE W761-1 RJ450 to < *—
SiemensSCALANCE W774-1 M12 EEC0 to < *—
SiemensSCALANCE W774-1 RJ450 to < *—
SiemensSCALANCE W774-1 RJ45 (USA)0 to < *—
SiemensSCALANCE W778-1 M120 to < *—
SiemensSCALANCE W778-1 M12 EEC0 to < *—
SiemensSCALANCE W786-1 RJ450 to < *—
SiemensSCALANCE W786-2 RJ450 to < *—
SiemensSCALANCE W786-2 SFP0 to < *—
SiemensSCALANCE W786-2IA RJ450 to < *—
SiemensSCALANCE W788-1 M120 to < *—
SiemensSCALANCE W788-1 RJ450 to < *—
SiemensSCALANCE W788-2 M120 to < *—
SiemensSCALANCE W788-2 M12 EEC0 to < *—
SiemensSCALANCE W788-2 RJ450 to < *—
SiemensSCALANCE WAB762-10 to < V3.0.0—
SiemensSCALANCE WAM763-10 to < V3.0.0—
SiemensSCALANCE WAM763-1 (ME)0 to < V3.0.0—
SiemensSCALANCE WAM763-1 (US)0 to < V3.0.0—
SiemensSCALANCE WAM766-10 to < V3.0.0—
SiemensSCALANCE WAM766-1 (ME)0 to < V3.0.0—
SiemensSCALANCE WAM766-1 (US)0 to < V3.0.0—
SiemensSCALANCE WAM766-1 EEC0 to < V3.0.0—

103 further entries not shown. The complete list is in the raw JSON document.

06 References