Vulnerability Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Eu Firmware | All versions |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Eu | - |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Nam Firmware | All versions |
| Siemens | Ruggedcom Rm1224 Lte\(4G\) Nam | - |
| Siemens | Scalance M804Pb Firmware | All versions |
| Siemens | Scalance M804Pb | - |
| Siemens | Scalance M812-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M812-1 Adsl-Router | - |
| Siemens | Scalance M816-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M816-1 Adsl-Router | - |
| Siemens | Scalance M826-2 Shdsl-Router Firmware | All versions |
| Siemens | Scalance M826-2 Shdsl-Router | - |
| Siemens | Scalance M874-2 Firmware | All versions |
| Siemens | Scalance M874-2 | - |
| Siemens | Scalance M874-3 Firmware | All versions |
| Siemens | Scalance M874-3 | - |
| Siemens | Scalance M876-3 Firmware | All versions |
| Siemens | Scalance M876-3 | - |
| Siemens | Scalance M876-4 Firmware | All versions |
| Siemens | Scalance M876-4 | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-413565.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdfVendor Advisory
FAQ
What is CVE-2022-46143?
CVE-2022-46143 is a vulnerability with a CVSS score of 2.7 (LOW). Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
How severe is CVE-2022-46143?
CVE-2022-46143 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-46143?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Ruggedcom Rm1224 Lte\(4G\) Eu Firmware, Siemens Ruggedcom Rm1224 Lte\(4G\) Eu, Siemens Ruggedcom Rm1224 Lte\(4G\) Nam Firmware, Siemens Ruggedcom Rm1224 Lte\(4G\) Nam, Siemens Scalance M804Pb Firmware.