CVE-2022-46140

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

VendorProductVersions
SiemensRUGGEDCOM RM1224 LTE(4G) EU< V7.2
SiemensRUGGEDCOM RM1224 LTE(4G) NAM< V7.2
SiemensSCALANCE M804PB< V7.2
SiemensSCALANCE M812-1 ADSL-Router< V7.2
SiemensSCALANCE M812-1 ADSL-Router< V7.2
SiemensSCALANCE M816-1 ADSL-Router< V7.2
SiemensSCALANCE M816-1 ADSL-Router< V7.2
SiemensSCALANCE M826-2 SHDSL-Router< V7.2
SiemensSCALANCE M874-2< V7.2
SiemensSCALANCE M874-3< V7.2
SiemensSCALANCE M876-3< V7.2
SiemensSCALANCE M876-3 (ROK)< V7.2
SiemensSCALANCE M876-4< V7.2
SiemensSCALANCE M876-4 (EU)< V7.2
SiemensSCALANCE M876-4 (NAM)< V7.2
SiemensSCALANCE MUM853-1 (EU)< V7.2
SiemensSCALANCE MUM856-1 (EU)< V7.2
SiemensSCALANCE MUM856-1 (RoW)< V7.2
SiemensSCALANCE S615 EEC LAN-Router< V7.2
SiemensSCALANCE S615 LAN-Router< V7.2
SiemensSCALANCE SC622-2C< V2.3
SiemensSCALANCE SC626-2C< V2.3
SiemensSCALANCE SC632-2C< V2.3
SiemensSCALANCE SC636-2C< V2.3
SiemensSCALANCE SC642-2C< V2.3
SiemensSCALANCE SC646-2C< V2.3
SiemensSCALANCE W1748-1 M12< *
SiemensSCALANCE W1748-1 M12< *
SiemensSCALANCE W1788-1 M12< *
SiemensSCALANCE W1788-2 EEC M12< *
SiemensSCALANCE W1788-2 M12< *
SiemensSCALANCE W1788-2IA M12< *
SiemensSCALANCE W721-1 RJ45< *
SiemensSCALANCE W721-1 RJ45< *
SiemensSCALANCE W722-1 RJ45< *
SiemensSCALANCE W722-1 RJ45< *
SiemensSCALANCE W722-1 RJ45< *
SiemensSCALANCE W734-1 RJ45< *
SiemensSCALANCE W734-1 RJ45< *
SiemensSCALANCE W734-1 RJ45< *
SiemensSCALANCE W734-1 RJ45 (USA)< *
SiemensSCALANCE W738-1 M12< *
SiemensSCALANCE W738-1 M12< *
SiemensSCALANCE W748-1 M12< *
SiemensSCALANCE W748-1 M12< *
SiemensSCALANCE W748-1 RJ45< *
SiemensSCALANCE W748-1 RJ45< *
SiemensSCALANCE W761-1 RJ45< *
SiemensSCALANCE W761-1 RJ45< *
SiemensSCALANCE W774-1 M12 EEC< *

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-461415.5A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allowCVE-2022-461425.7Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the filCVE-2022-461432.7Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer CVE-2022-461446.5A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) CVE-2022-461459.8authentik is an open-source identity provider. Versions prior to 2022.11.2 and 2022.10.2 are vulnerable to unauthorized user creation and poCVE-2022-461468.8Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a PrometheuCVE-2022-461476.1Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions priCVE-2022-461485.4Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.beta11 and prior on tCVE-2022-461495.4Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10CVE-2022-46156.1Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.CVE-2022-461504.3Discourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14 of the `beta` and `CVE-2022-461516.1Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callback
CVE-2022-46140: Medium severity, CVSS 6.5 | Vulnix