7.1

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance Sc622-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc622-2c Version-
Siemens ≫ Scalance Sc626-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc626-2c Version-
Siemens ≫ Scalance Sc632-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc632-2c Version-
Siemens ≫ Scalance Sc636-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc636-2c Version-
Siemens ≫ Scalance Sc642-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc642-2c Version-
Siemens ≫ Scalance Sc646-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc646-2c Version-
Siemens ≫ Scalance Xb205-3 Firmware Version-
   Siemens ≫ Scalance Xb205-3 Version-
Siemens ≫ Scalance Xb208 Firmware Version-
   Siemens ≫ Scalance Xb208 Version-
Siemens ≫ Scalance Xb213-3 Firmware Version-
   Siemens ≫ Scalance Xb213-3 Version-
Siemens ≫ Scalance Xb216 Firmware Version-
   Siemens ≫ Scalance Xb216 Version-
Siemens ≫ Scalance Xc206-2 Firmware Version-
   Siemens ≫ Scalance Xc206-2 Version-
Siemens ≫ Scalance Xc208 Firmware Version-
   Siemens ≫ Scalance Xc208 Version-
Siemens ≫ Scalance Xc216 Firmware Version-
   Siemens ≫ Scalance Xc216 Version-
Siemens ≫ Scalance Xc224 Firmware Version-
   Siemens ≫ Scalance Xc224 Version-
Siemens ≫ Scalance Xf204 Firmware Version-
   Siemens ≫ Scalance Xf204 Version-
Siemens ≫ Scalance Xp208 Firmware Version-
   Siemens ≫ Scalance Xp208 Version-
Siemens ≫ Scalance Xp216 Firmware Version-
   Siemens ≫ Scalance Xp216 Version-
Siemens ≫ Scalance Xr324wg Firmware Version-
   Siemens ≫ Scalance Xr324wg Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.298
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
productcert@siemens.com 7.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
productcert@siemens.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.