Scalance Wam763 1 Firmware CVE-2022-46140

HIGH

Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

2022-12-13 productcert@siemens.com

Information Disclosure Siemens Scalance Wam763 1 Firmware Scalance Wam766 1 Firmware Scalance Wam766 1 6Ghz Firmware Scalance Wum763 1 Firmware Scalance Wum766 1 Firmware Scalance Wum766 1 6Ghz Firmware Scalance S615 Firmware Scalance Sc622 2C Firmware Scalance Sc632 2C Firmware Scalance Sc636 2C Firmware Scalance Sc642 2C Firmware Scalance Sc646 2C Firmware Scalance Xb205 3 Firmware Scalance Xb205 3Ld Firmware Scalance Xb208 Firmware Scalance Xb213 3 Firmware Scalance Xb213 3Ld Firmware Scalance Xb216 Firmware Scalance Xc206 2 Firmware Scalance Xc206 2G Poe Firmware Scalance Xc206 2G Poe Eec Firmware Scalance Xc206 2Sfp Eec Firmware Scalance Xc206 2Sfp G Firmware Scalance Xc206 2Sfp G Eec Firmware Scalance Xc208 Firmware Scalance Xc216 Firmware Scalance Xc216 4C Firmware Scalance Xc216 4C G Firmware Scalance Xc216 4C G Eec Firmware Scalance Xc216Eec Firmware Scalance Xc224 Firmware Scalance Xc224 4C G Firmware Scalance Xc224 4C G Eec Firmware Scalance Xm408 4C Firmware Scalance Xm408 8C Firmware Scalance Xm416 4C Firmware Scalance Xp208 Firmware Scalance Xp208Eec Firmware Scalance Xp208Poe Eec Firmware Scalance Xp216 Firmware Scalance Xp216Eec Firmware Scalance Xp216Poe Eec Firmware Scalance Xr324Wg Firmware Scalance Xr328 4C Wg Firmware Scalance Xr524 8C Firmware Scalance Xr526 8C Firmware Scalance Xr528 6M Firmware Scalance Xr552 12M Firmware Scalance Sc626 2C Firmware Scalance Xc206 2Sfp Firmware Scalance Xf204 Firmware Scalance Xf204 Dna Firmware Scalance M804Pb Firmware Scalance M874 2 Firmware Scalance M874 3 Firmware Scalance M876 3 Firmware Scalance M876 4 Firmware Scalance Mum856 1 Firmware Scalance W1788 2Ia M12 Firmware Scalance W1788 2 M12 Firmware Scalance W1788 2 Eec M12 Firmware Scalance W1788 1 M12 Firmware Scalance Mum853 1 Firmware Ruggedcom Rm1224 Lte 4G Eu Firmware Ruggedcom Rm1224 Lte 4G Nam Firmware Scalance M812 1 Adsl Router Firmware Scalance M816 1 Adsl Router Firmware Scalance M826 2 Shdsl Router Firmware Scalance S615 Eec Firmware Scalance W721 1 Rj45 Firmware Scalance W722 1 Rj45 Firmware Scalance W734 1 Rj45 Firmware Scalance W738 1 M12 Firmware Scalance W748 1 M12 Firmware Scalance W761 1 Rj45 Firmware Scalance W774 1 M12 Eec Firmware Scalance W774 1 M12 Rj45 Firmware Scalance W774 1 Rj45 Firmware Scalance W778 1 M12 Firmware Scalance W778 1 M12 Eec Firmware Scalance W786 1 Rj45 Firmware Scalance W786 2 Rj45 Firmware Scalance W786 2 Sfp Firmware Scalance W786 2Ia Rj45 Firmware Scalance W788 1 M12 Firmware Scalance W788 1 Rj45 Firmware Scalance W788 2 M12 Firmware Scalance W788 2 M12 Eec Firmware Scalance W1748 1 M12 Firmware Scalance Wam766 1 Ecc Firmware Scalance Xc208 Eec Firmware Scalance Xc208 Poe Firmware Scalance Xc216 3G Poe Firmware Scalance Xf204 2Ba Firmware Scalance Xf204 2Bca Dna Firmware Scalance Xr326 2C Firmware Scalance Xr326 2C Poe Firmware Siplus Net Scalance Xc206 2 Firmware Siplus Net Scalance Xc206 2Sfp Firmware Siplus Net Scalance Xc208 Firmware Siplus Net Scalance Xc216 4C Firmware

7.1

CVSS 4.0 · Vendor: siemens

Share

Severity by source

Vendor (siemens) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (siemens) · only source for this CVE.

CVSS VectorVendor: siemens

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

X

Lifecycle Timeline

1

CVE Published

Dec 13, 2022 - 16:15 cve.org

HIGH 7.1

DescriptionCVE.org

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

AnalysisAI

Affected devices use a weak encryption scheme to encrypt the debug zip file. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-327. Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system. Affected products include: Siemens Ruggedcom Rm1224 Lte\(4G\) Eu Firmware, Siemens Ruggedcom Rm1224 Lte\(4G\) Nam Firmware, Siemens Scalance M804Pb Firmware, Siemens Scalance M812-1 Adsl-Router Firmware, Siemens Scalance M816-1 Adsl-Router Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Scalance Wam763 1 Firmware

View all

CVE-2020-24588 LOW Monitor POC

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn

CVE-2022-31766 HIGH This Week

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDC

CVE-2020-26140 MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this v

CVE-2022-46142 MEDIUM This Month

Affected devices store the CLI user passwords encrypted in flash memory. Rated medium severity (CVSS 5.2), this vulnerab

CVE-2022-46143 MEDIUM This Month

Affected devices do not check the TFTP blocksize correctly. Rated medium severity (CVSS 5.1), this vulnerability is remo

Same weakness CWE-327 – Use of a Broken or Risky Cryptographic Algorithm

View all

CVE-2022-3365 CRITICAL POC

CVE-2014-8687 CRITICAL POC

CVE-2017-17382 MEDIUM POC

CVE-2016-6602 CRITICAL POC

CVE-2023-34039 CRITICAL POC

CVE-2025-2539 HIGH POC

CVE-2017-9466 CRITICAL POC

CVE-2023-5347 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2022-46140 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy