7.1

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance Sc622-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc622-2c Version -
Siemens ≫ Scalance Sc626-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc626-2c Version -
Siemens ≫ Scalance Sc632-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc632-2c Version -
Siemens ≫ Scalance Sc636-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc636-2c Version -
Siemens ≫ Scalance Sc642-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc642-2c Version -
Siemens ≫ Scalance Sc646-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc646-2c Version -
Siemens ≫ Scalance Wam763-1 Firmware Version -
   Siemens ≫ Scalance Wam763-1 Version -
Siemens ≫ Scalance Wam766-1 Firmware Version -
   Siemens ≫ Scalance Wam766-1 Version -
Siemens ≫ Scalance Wum763-1 Firmware Version -
   Siemens ≫ Scalance Wum763-1 Version -
Siemens ≫ Scalance Wum766-1 Firmware Version -
   Siemens ≫ Scalance Wum766-1 Version -
Siemens ≫ Scalance Xb205-3 Firmware Version -
   Siemens ≫ Scalance Xb205-3 Version -
Siemens ≫ Scalance Xb208 Firmware Version -
   Siemens ≫ Scalance Xb208 Version -
Siemens ≫ Scalance Xb213-3 Firmware Version -
   Siemens ≫ Scalance Xb213-3 Version -
Siemens ≫ Scalance Xb216 Firmware Version -
   Siemens ≫ Scalance Xb216 Version -
Siemens ≫ Scalance Xc206-2 Firmware Version -
   Siemens ≫ Scalance Xc206-2 Version -
Siemens ≫ Scalance Xc208 Firmware Version -
   Siemens ≫ Scalance Xc208 Version -
Siemens ≫ Scalance Xc216 Firmware Version -
   Siemens ≫ Scalance Xc216 Version -
Siemens ≫ Scalance Xc216-4c Firmware Version -
   Siemens ≫ Scalance Xc216-4c Version -
Siemens ≫ Scalance Xc216eec Firmware Version -
   Siemens ≫ Scalance Xc216eec Version -
Siemens ≫ Scalance Xc224 Firmware Version -
   Siemens ≫ Scalance Xc224 Version -
Siemens ≫ Scalance Xf204 Firmware Version -
   Siemens ≫ Scalance Xf204 Version -
Siemens ≫ Scalance Xm408-4c Firmware Version -
   Siemens ≫ Scalance Xm408-4c Version -
Siemens ≫ Scalance Xm408-8c Firmware Version -
   Siemens ≫ Scalance Xm408-8c Version -
Siemens ≫ Scalance Xm416-4c Firmware Version -
   Siemens ≫ Scalance Xm416-4c Version -
Siemens ≫ Scalance Xp208 Firmware Version -
   Siemens ≫ Scalance Xp208 Version -
Siemens ≫ Scalance Xp208eec Firmware Version -
   Siemens ≫ Scalance Xp208eec Version -
Siemens ≫ Scalance Xp216 Firmware Version -
   Siemens ≫ Scalance Xp216 Version -
Siemens ≫ Scalance Xp216eec Firmware Version -
   Siemens ≫ Scalance Xp216eec Version -
Siemens ≫ Scalance Xr324wg Firmware Version -
   Siemens ≫ Scalance Xr324wg Version -
Siemens ≫ Scalance Xr326-2c Firmware Version -
   Siemens ≫ Scalance Xr326-2c Version -
Siemens ≫ Scalance Xr524-8c Firmware Version -
   Siemens ≫ Scalance Xr524-8c Version -
Siemens ≫ Scalance Xr526-8c Firmware Version -
   Siemens ≫ Scalance Xr526-8c Version -
Siemens ≫ Scalance Xr528-6m Firmware Version -
   Siemens ≫ Scalance Xr528-6m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.139
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Siemens 7.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Siemens 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://cert-portal.siemens.com/productcert/html/ssa-413565.html
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
Vendor Advisory