5.1

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance Sc622-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc622-2c Version -
Siemens ≫ Scalance Sc626-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc626-2c Version -
Siemens ≫ Scalance Sc632-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc632-2c Version -
Siemens ≫ Scalance Sc636-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc636-2c Version -
Siemens ≫ Scalance Sc642-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc642-2c Version -
Siemens ≫ Scalance Sc646-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc646-2c Version -
Siemens ≫ Scalance Wam763-1 Firmware Version -
   Siemens ≫ Scalance Wam763-1 Version -
Siemens ≫ Scalance Wam766-1 Firmware Version -
   Siemens ≫ Scalance Wam766-1 Version -
Siemens ≫ Scalance Wum763-1 Firmware Version -
   Siemens ≫ Scalance Wum763-1 Version -
Siemens ≫ Scalance Wum766-1 Firmware Version -
   Siemens ≫ Scalance Wum766-1 Version -
Siemens ≫ Scalance Xb205-3 Firmware Version -
   Siemens ≫ Scalance Xb205-3 Version -
Siemens ≫ Scalance Xb208 Firmware Version -
   Siemens ≫ Scalance Xb208 Version -
Siemens ≫ Scalance Xb213-3 Firmware Version -
   Siemens ≫ Scalance Xb213-3 Version -
Siemens ≫ Scalance Xb216 Firmware Version -
   Siemens ≫ Scalance Xb216 Version -
Siemens ≫ Scalance Xc206-2 Firmware Version -
   Siemens ≫ Scalance Xc206-2 Version -
Siemens ≫ Scalance Xc208 Firmware Version -
   Siemens ≫ Scalance Xc208 Version -
Siemens ≫ Scalance Xc216 Firmware Version -
   Siemens ≫ Scalance Xc216 Version -
Siemens ≫ Scalance Xc216-4c Firmware Version -
   Siemens ≫ Scalance Xc216-4c Version -
Siemens ≫ Scalance Xc216eec Firmware Version -
   Siemens ≫ Scalance Xc216eec Version -
Siemens ≫ Scalance Xc224 Firmware Version -
   Siemens ≫ Scalance Xc224 Version -
Siemens ≫ Scalance Xf204 Firmware Version -
   Siemens ≫ Scalance Xf204 Version -
Siemens ≫ Scalance Xm408-4c Firmware Version -
   Siemens ≫ Scalance Xm408-4c Version -
Siemens ≫ Scalance Xm408-8c Firmware Version -
   Siemens ≫ Scalance Xm408-8c Version -
Siemens ≫ Scalance Xm416-4c Firmware Version -
   Siemens ≫ Scalance Xm416-4c Version -
Siemens ≫ Scalance Xp208 Firmware Version -
   Siemens ≫ Scalance Xp208 Version -
Siemens ≫ Scalance Xp208eec Firmware Version -
   Siemens ≫ Scalance Xp208eec Version -
Siemens ≫ Scalance Xp216 Firmware Version -
   Siemens ≫ Scalance Xp216 Version -
Siemens ≫ Scalance Xp216eec Firmware Version -
   Siemens ≫ Scalance Xp216eec Version -
Siemens ≫ Scalance Xr324wg Firmware Version -
   Siemens ≫ Scalance Xr324wg Version -
Siemens ≫ Scalance Xr326-2c Firmware Version -
   Siemens ≫ Scalance Xr326-2c Version -
Siemens ≫ Scalance Xr524-8c Firmware Version -
   Siemens ≫ Scalance Xr524-8c Version -
Siemens ≫ Scalance Xr526-8c Firmware Version -
   Siemens ≫ Scalance Xr526-8c Version -
Siemens ≫ Scalance Xr528-6m Firmware Version -
   Siemens ≫ Scalance Xr528-6m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.482
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Siemens 5.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Siemens 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
NIST 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

https://cert-portal.siemens.com/productcert/html/ssa-413565.html
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-180704.html
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf