Vulnerabilities

TI-2022-22788 CVE-2022-46144 · GHSA-p939-r66p-8wwm

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All…

LOW 33

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions >= V2.3 < V3.0), SCALANCE SC626-2C (6GK5626-2GS00-2AC2) (All versi…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00928 Published 2022-12-13 Fixed in V2.3, V3.0 +1 CWE-664

TI-2022-22787 CVE-2022-46143 · GHSA-v7cj-vm62-r38r

Affected devices do not check the TFTP blocksize correctly.

LOW 25

Affected devices do not check the TFTP blocksize correctly.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00746 Published 2022-12-13 Fixed in V7.2, V8.0 +5 CWE-1284

TI-2022-22786 CVE-2022-46142 · GHSA-3m3j-3mx3-jmxc

Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EU

LOW 23

Affected devices store the CLI user passwords encrypted in flash memory.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00269 Published 2022-12-13 Fixed in V7.2, V2.3 +4 CWE-257

TI-2022-22784 CVE-2022-46140 · GHSA-39hc-9gp8-p9wh

Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EU

LOW 31

Affected devices use a weak encryption scheme to encrypt the debug zip file.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00248 Published 2022-12-13 Fixed in V7.2, V2.3 +3 CWE-327

Vulnerabilities

Filters

A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All…

Affected devices do not check the TFTP blocksize correctly.

Insufficiently protected credentials in Siemens RUGGEDCOM RM1224 LTE EU

Broken or risky cryptographic algorithm in Siemens RUGGEDCOM RM1224 LTE EU