CVE-2022-46142

published 2022-12-13

CVE-2022-46142: Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the…

medium 5.2 CVSS 4.0

AV P AC L AT N PR N UI N VC H VI L VA L SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Affected

105 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rm1224_lte_eu	< V7.2	V7.2
siemens	ruggedcom_rm1224_lte_nam	< V7.2	V7.2
siemens	scalance_m804pb	< V7.2	V7.2
siemens	scalance_m812-1_adsl-router	< V7.2	V7.2
siemens	scalance_m816-1_adsl-router	< V7.2	V7.2
siemens	scalance_m826-2_shdsl-router	< V7.2	V7.2
siemens	scalance_m874-2	< V7.2	V7.2
siemens	scalance_m874-3	< V7.2	V7.2
siemens	scalance_m876-3	< V7.2	V7.2
siemens	scalance_m876-4	< V7.2	V7.2
siemens	scalance_mum853-1	< V7.2	V7.2
siemens	scalance_mum856-1	< V7.2	V7.2
siemens	scalance_s615_eec_lan-router	< V7.2	V7.2
siemens	scalance_s615_lan-router	< V7.2	V7.2
siemens	scalance_sc622-2c	< V2.3	V2.3
siemens	scalance_sc622-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc622-2c_firmware	< 2.3	2.3
siemens	scalance_sc626-2c	< V2.3	V2.3
siemens	scalance_sc626-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc626-2c_firmware	< 2.3	2.3
siemens	scalance_sc632-2c	< V2.3	V2.3
siemens	scalance_sc632-2c	>= V2.3 < V3.0	V3.0
siemens	scalance_sc632-2c_firmware	< 2.3	2.3
siemens	scalance_sc636-2c	< V2.3	V2.3
siemens	scalance_sc636-2c	>= V2.3 < V3.0	V3.0

CWE-257 CWE-522