CVE-2022-46143
—CVSS 4.0
5.1 medium
EPSS
<1%p51
Published
()
Modified
Description
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
- Vendors
- siemens
- Products
- ruggedcom rm1224 lte\(4g\) eu firmware, ruggedcom rm1224 lte\(4g\) nam firmware, scalance m804pb firmware, scalance m812-1 adsl-router firmware, scalance m816-1 adsl-router firmware, scalance m826-2 shdsl-router firmware, scalance m874-2 firmware, scalance m874-3 firmware, scalance m876-3 firmware, scalance m876-4 firmware, scalance mum853-1 firmware, scalance mum856-1 firmware
- Weakness
- CWE-1284
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news0 stories
No ingested article mentions this CVE yet.