CVE-2022-46142

MEDIUM

Siemens Ruggedcom RM1224 LTE(4G) EU Firmware - Insufficiently Protected Credentials

Title source: llm
STIX 2.1

Description

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

References (2)

Core 2

Scores

CVSS v3 5.7
EPSS 0.0026
EPSS Percentile 17.3%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-522 CWE-257
Status published
Products (50)
siemens/ruggedcom_rm1224_lte\(4g\)_eu_firmware
siemens/ruggedcom_rm1224_lte\(4g\)_nam_firmware
siemens/scalance_m804pb_firmware
siemens/scalance_m812-1_adsl-router_firmware
siemens/scalance_m816-1_adsl-router_firmware
siemens/scalance_m826-2_shdsl-router_firmware
siemens/scalance_m874-2_firmware
siemens/scalance_m874-3_firmware
siemens/scalance_m876-3_firmware
siemens/scalance_m876-4_firmware
... and 40 more
Published Dec 13, 2022
Tracked Since Feb 18, 2026