5.1

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Scalance Sc622-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc622-2c Version-
Siemens ≫ Scalance Sc626-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc626-2c Version-
Siemens ≫ Scalance Sc632-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc632-2c Version-
Siemens ≫ Scalance Sc636-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc636-2c Version-
Siemens ≫ Scalance Sc642-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc642-2c Version-
Siemens ≫ Scalance Sc646-2c Firmware Version < 2.3
   Siemens ≫ Scalance Sc646-2c Version-
Siemens ≫ Scalance Xb205-3 Firmware Version-
   Siemens ≫ Scalance Xb205-3 Version-
Siemens ≫ Scalance Xb208 Firmware Version-
   Siemens ≫ Scalance Xb208 Version-
Siemens ≫ Scalance Xb213-3 Firmware Version-
   Siemens ≫ Scalance Xb213-3 Version-
Siemens ≫ Scalance Xb216 Firmware Version-
   Siemens ≫ Scalance Xb216 Version-
Siemens ≫ Scalance Xc206-2 Firmware Version-
   Siemens ≫ Scalance Xc206-2 Version-
Siemens ≫ Scalance Xc208 Firmware Version-
   Siemens ≫ Scalance Xc208 Version-
Siemens ≫ Scalance Xc216 Firmware Version-
   Siemens ≫ Scalance Xc216 Version-
Siemens ≫ Scalance Xc224 Firmware Version-
   Siemens ≫ Scalance Xc224 Version-
Siemens ≫ Scalance Xf204 Firmware Version-
   Siemens ≫ Scalance Xf204 Version-
Siemens ≫ Scalance Xp208 Firmware Version-
   Siemens ≫ Scalance Xp208 Version-
Siemens ≫ Scalance Xp216 Firmware Version-
   Siemens ≫ Scalance Xp216 Version-
Siemens ≫ Scalance Xr324wg Firmware Version-
   Siemens ≫ Scalance Xr324wg Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.511
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
productcert@siemens.com 5.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
productcert@siemens.com 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.