CVE-2022-46143

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1284

Affected software

VendorProductVersions
SiemensRUGGEDCOM RM1224 LTE(4G) EU< V7.2
SiemensRUGGEDCOM RM1224 LTE(4G) EU< V8.0
SiemensRUGGEDCOM RM1224 LTE(4G) NAM< V7.2
SiemensRUGGEDCOM RM1224 LTE(4G) NAM< V8.0
SiemensSCALANCE M804PB< V7.2
SiemensSCALANCE M804PB< V8.0
SiemensSCALANCE M812-1 ADSL-Router< V7.2
SiemensSCALANCE M812-1 ADSL-Router< V8.0
SiemensSCALANCE M812-1 ADSL-Router< V7.2
SiemensSCALANCE M812-1 ADSL-Router< V8.0
SiemensSCALANCE M816-1 ADSL-Router< V7.2
SiemensSCALANCE M816-1 ADSL-Router< V8.0
SiemensSCALANCE M816-1 ADSL-Router< V7.2
SiemensSCALANCE M816-1 ADSL-Router< V8.0
SiemensSCALANCE M826-2 SHDSL-Router< V7.2
SiemensSCALANCE M826-2 SHDSL-Router< V8.0
SiemensSCALANCE M874-2< V7.2
SiemensSCALANCE M874-2< V8.0
SiemensSCALANCE M874-3< V7.2
SiemensSCALANCE M874-3< V8.0
SiemensSCALANCE M876-3< V7.2
SiemensSCALANCE M876-3< V8.0
SiemensSCALANCE M876-3 (ROK)< V7.2
SiemensSCALANCE M876-3 (ROK)< V8.0
SiemensSCALANCE M876-4< V7.2
SiemensSCALANCE M876-4< V8.0
SiemensSCALANCE M876-4 (EU)< V7.2
SiemensSCALANCE M876-4 (EU)< V8.0
SiemensSCALANCE M876-4 (NAM)< V7.2
SiemensSCALANCE M876-4 (NAM)< V8.0
SiemensSCALANCE MUM853-1 (EU)< V7.2
SiemensSCALANCE MUM853-1 (EU)< V8.0
SiemensSCALANCE MUM856-1 (EU)< V7.2
SiemensSCALANCE MUM856-1 (EU)< V8.0
SiemensSCALANCE MUM856-1 (RoW)< V7.2
SiemensSCALANCE MUM856-1 (RoW)< V8.0
SiemensSCALANCE S615 EEC LAN-Router< V7.2
SiemensSCALANCE S615 EEC LAN-Router< V8.0
SiemensSCALANCE S615 LAN-Router< V7.2
SiemensSCALANCE S615 LAN-Router< V8.0
SiemensSCALANCE SC622-2C< V2.3
SiemensSCALANCE SC622-2C>= V2.3, < V3.0
SiemensSCALANCE SC626-2C< V2.3
SiemensSCALANCE SC626-2C>= V2.3, < V3.0
SiemensSCALANCE SC632-2C< V2.3
SiemensSCALANCE SC632-2C>= V2.3, < V3.0
SiemensSCALANCE SC636-2C< V2.3
SiemensSCALANCE SC636-2C>= V2.3, < V3.0
SiemensSCALANCE SC642-2C< V2.3
SiemensSCALANCE SC642-2C>= V2.3, < V3.0

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-461446.5A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) CVE-2022-461459.8authentik is an open-source identity provider. Versions prior to 2022.11.2 and 2022.10.2 are vulnerable to unauthorized user creation and poCVE-2022-461468.8Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a PrometheuCVE-2022-461476.1Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions priCVE-2022-461485.4Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.beta11 and prior on tCVE-2022-461495.4Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10CVE-2022-46156.1Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.CVE-2022-461504.3Discourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14 of the `beta` and `CVE-2022-461516.1Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callbackCVE-2022-461528.8OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain anCVE-2022-461536.5Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing CVE-2022-461547.5Kodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticat
CVE-2022-46143: Low severity, CVSS 2.7 | Vulnix