medium6.5
CVE-2022-46140
Affected devices use a weak encryption scheme to encrypt the debug zip file.
Impact
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Ruggedcom Rm1224 Lte\(4g\) Eu Firmware | All versions |
| Siemens | Ruggedcom Rm1224 Lte\(4g\) Nam Firmware | All versions |
| Siemens | Scalance M804pb Firmware | All versions |
| Siemens | Scalance M812-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M816-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M826-2 Shdsl-Router Firmware | All versions |
| Siemens | Scalance M874-2 Firmware | All versions |
| Siemens | Scalance M874-3 Firmware | All versions |
| Siemens | Scalance M876-3 Firmware | All versions |
| Siemens | Scalance M876-4 Firmware | All versions |
| Siemens | Scalance Mum853-1 Firmware | All versions |
| Siemens | Scalance Mum856-1 Firmware | All versions |