CVE-2022-46140

published 2022-12-13

CVE-2022-46140: Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and…

high 7.1 CVSS 4.0

AV N AC L AT N PR L UI N VC H VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Affected

99 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rm1224_lte_eu	< V7.2	V7.2
siemens	ruggedcom_rm1224_lte_nam	< V7.2	V7.2
siemens	scalance_m804pb	< V7.2	V7.2
siemens	scalance_m812-1_adsl-router	< V7.2	V7.2
siemens	scalance_m816-1_adsl-router	< V7.2	V7.2
siemens	scalance_m826-2_shdsl-router	< V7.2	V7.2
siemens	scalance_m874-2	< V7.2	V7.2
siemens	scalance_m874-3	< V7.2	V7.2
siemens	scalance_m876-3	< V7.2	V7.2
siemens	scalance_m876-4	< V7.2	V7.2
siemens	scalance_mum853-1	< V7.2	V7.2
siemens	scalance_mum856-1	< V7.2	V7.2
siemens	scalance_s615_eec_lan-router	< V7.2	V7.2
siemens	scalance_s615_lan-router	< V7.2	V7.2
siemens	scalance_sc622-2c	< V2.3	V2.3
siemens	scalance_sc622-2c_firmware	< 2.3	2.3
siemens	scalance_sc626-2c	< V2.3	V2.3
siemens	scalance_sc626-2c_firmware	< 2.3	2.3
siemens	scalance_sc632-2c	< V2.3	V2.3
siemens	scalance_sc632-2c_firmware	< 2.3	2.3
siemens	scalance_sc636-2c	< V2.3	V2.3
siemens	scalance_sc636-2c_firmware	< 2.3	2.3
siemens	scalance_sc642-2c	< V2.3	V2.3
siemens	scalance_sc642-2c_firmware	< 2.3	2.3
siemens	scalance_sc646-2c	< V2.3	V2.3

CWE-327