low2.7
CVE-2022-46143
Affected devices do not check the TFTP blocksize correctly.
Impact
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Ruggedcom Rm1224 Lte\(4g\) Eu Firmware | All versions |
| Siemens | Ruggedcom Rm1224 Lte\(4g\) Nam Firmware | All versions |
| Siemens | Scalance M804pb Firmware | All versions |
| Siemens | Scalance M812-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M816-1 Adsl-Router Firmware | All versions |
| Siemens | Scalance M826-2 Shdsl-Router Firmware | All versions |
| Siemens | Scalance M874-2 Firmware | All versions |
| Siemens | Scalance M874-3 Firmware | All versions |
| Siemens | Scalance M876-3 Firmware | All versions |
| Siemens | Scalance M876-4 Firmware | All versions |
| Siemens | Scalance Mum853-1 Firmware | All versions |
| Siemens | Scalance Mum856-1 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-413565.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf