CVE-2022-46143

published 2022-12-13

CVE-2022-46143: Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially…

medium 5.1 CVSS 4.0

AV N AC L AT N PR H UI N VC L VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Affected

122 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rm1224_lte_eu	< V7.2	V7.2
siemens	ruggedcom_rm1224_lte_eu	< V8.0	V8.0
siemens	ruggedcom_rm1224_lte_nam	< V7.2	V7.2
siemens	ruggedcom_rm1224_lte_nam	< V8.0	V8.0
siemens	scalance_m804pb	< V7.2	V7.2
siemens	scalance_m804pb	< V8.0	V8.0
siemens	scalance_m812-1_adsl-router	< V7.2	V7.2
siemens	scalance_m812-1_adsl-router	< V8.0	V8.0
siemens	scalance_m816-1_adsl-router	< V7.2	V7.2
siemens	scalance_m816-1_adsl-router	< V8.0	V8.0
siemens	scalance_m826-2_shdsl-router	< V7.2	V7.2
siemens	scalance_m826-2_shdsl-router	< V8.0	V8.0
siemens	scalance_m874-2	< V7.2	V7.2
siemens	scalance_m874-2	< V8.0	V8.0
siemens	scalance_m874-3	< V7.2	V7.2
siemens	scalance_m874-3	< V8.0	V8.0
siemens	scalance_m876-3	< V7.2	V7.2
siemens	scalance_m876-3	< V8.0	V8.0
siemens	scalance_m876-4	< V7.2	V7.2
siemens	scalance_m876-4	< V8.0	V8.0
siemens	scalance_mum853-1	< V7.2	V7.2
siemens	scalance_mum853-1	< V8.0	V8.0
siemens	scalance_mum856-1	< V7.2	V7.2
siemens	scalance_mum856-1	< V8.0	V8.0
siemens	scalance_s615_eec_lan-router	< V7.2	V7.2

CVSS provenance

nvd v4.0 5.1 MEDIUM CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

osv 8.8 HIGH

CWE-1284