CVE-2022-46143

LOW

Siemens Ruggedcom RM1224 LTE and Scalance Devices - Uninitialized Buffer Read via TFTP Blocksize Mismatch

Title source: llm
STIX 2.1

Description

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

References (4)

Core 4

Scores

CVSS v3 2.7
EPSS 0.0070
EPSS Percentile 48.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-1284
Status published
Products (50)
siemens/ruggedcom_rm1224_lte\(4g\)_eu_firmware
siemens/ruggedcom_rm1224_lte\(4g\)_nam_firmware
siemens/scalance_m804pb_firmware
siemens/scalance_m812-1_adsl-router_firmware
siemens/scalance_m816-1_adsl-router_firmware
siemens/scalance_m826-2_shdsl-router_firmware
siemens/scalance_m874-2_firmware
siemens/scalance_m874-3_firmware
siemens/scalance_m876-3_firmware
siemens/scalance_m876-4_firmware
... and 40 more
Published Dec 13, 2022
Tracked Since Feb 18, 2026