CVE-2022-46143

5.1 mediumEPSS 0.7%

Medium (5.1) in siemens. EPSS 0.7% chance of exploitation in the next 30 days.

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-1284
Published: 2022-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:ruggedcom_rm1224_lte\(4g\)_eu_firmware
siemens:ruggedcom_rm1224_lte\(4g\)_nam_firmware
siemens:scalance_m804pb_firmware
siemens:scalance_m812-1_adsl-router_firmware
siemens:scalance_m816-1_adsl-router_firmware
siemens:scalance_m826-2_shdsl-router_firmware
siemens:scalance_m874-2_firmware
siemens:scalance_m874-3_firmware
siemens:scalance_m876-3_firmware
siemens:scalance_m876-4_firmware
siemens:scalance_mum853-1_firmware
siemens:scalance_mum856-1_firmware
siemens:scalance_s615_eec_firmware
siemens:scalance_s615_firmware
siemens:scalance_sc622-2c_firmware
siemens:scalance_sc626-2c_firmware
siemens:scalance_sc632-2c_firmware
siemens:scalance_sc636-2c_firmware
siemens:scalance_sc642-2c_firmware
siemens:scalance_sc646-2c_firmware
siemens:scalance_w1748-1_m12_firmware
siemens:scalance_w1788-1_m12_firmware
siemens:scalance_w1788-2_eec_m12_firmware
siemens:scalance_w1788-2_m12_firmware
siemens:scalance_w1788-2ia_m12_firmware
siemens:scalance_w721-1_rj45_firmware
siemens:scalance_w722-1_rj45_firmware
siemens:scalance_w734-1_rj45_firmware
siemens:scalance_w738-1_m12_firmware
siemens:scalance_w748-1_m12_firmware
siemens:scalance_w761-1_rj45_firmware
siemens:scalance_w774-1_m12_eec_firmware
siemens:scalance_w774-1_m12_rj45_firmware
siemens:scalance_w774-1_rj45_firmware
siemens:scalance_w778-1_m12_eec_firmware
siemens:scalance_w778-1_m12_firmware
siemens:scalance_w786-1_rj45_firmware
siemens:scalance_w786-2_rj45_firmware
siemens:scalance_w786-2_sfp_firmware
siemens:scalance_w786-2ia_rj45_firmware
siemens:scalance_w788-1_m12_firmware
siemens:scalance_w788-1_rj45_firmware
siemens:scalance_w788-2_m12_eec_firmware
siemens:scalance_w788-2_m12_firmware
siemens:scalance_wam763-1_firmware
siemens:scalance_wam766-1_6ghz_firmware
siemens:scalance_wam766-1_ecc_firmware
siemens:scalance_wam766-1_firmware
siemens:scalance_wum763-1_firmware
siemens:scalance_wum766-1_6ghz_firmware

References

Check your stack JSON