What’s Vulnerable › Vulnerabilities

CVE-2022-46140

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-13 · updated 2026-06-17
• Weakness: CWE-327

Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Affected products

• Siemens Ruggedcom Rm1224 Lte(4G) Eu Firmware: all versions
• Siemens Ruggedcom Rm1224 Lte(4G) Nam Firmware: all versions
• Siemens Scalance M804Pb Firmware: all versions
• Siemens Scalance M812-1 Adsl-Router Firmware: all versions
• Siemens Scalance M816-1 Adsl-Router Firmware: all versions
• Siemens Scalance M826-2 Shdsl-Router Firmware: all versions
• Siemens Scalance M874-2 Firmware: all versions
• Siemens Scalance M874-3 Firmware: all versions
• Siemens Scalance M876-3 Firmware: all versions
• Siemens Scalance M876-4 Firmware: all versions
• Siemens Scalance Mum853-1 Firmware: all versions
• Siemens Scalance Mum856-1 Firmware: all versions
• Siemens Scalance S615 Eec Firmware: all versions
• Siemens Scalance S615 Firmware: all versions
• Siemens Scalance Sc622-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance Sc626-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance Sc632-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance Sc636-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance Sc642-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance Sc646-2C Firmware: before 2.3 — fixed in 2.3
• Siemens Scalance W1748-1 M12 Firmware: all versions
• Siemens Scalance W1788-1 M12 Firmware: all versions
• Siemens Scalance W1788-2 Eec M12 Firmware: all versions
• Siemens Scalance W1788-2 M12 Firmware: all versions
• Siemens Scalance W1788-2Ia M12 Firmware: all versions
• Siemens Scalance W721-1 Rj45 Firmware: all versions
• Siemens Scalance W722-1 Rj45 Firmware: all versions
• Siemens Scalance W734-1 Rj45 Firmware: all versions
• Siemens Scalance W738-1 M12 Firmware: all versions
• Siemens Scalance W748-1 M12 Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens Scalance Sc622-2C Firmware 2.3; Siemens Scalance Sc626-2C Firmware 2.3; Siemens Scalance Sc632-2C Firmware 2.3; Siemens Scalance Sc636-2C Firmware 2.3; Siemens Scalance Sc642-2C Firmware 2.3; Siemens Scalance Sc646-2C Firmware 2.3. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-413565.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf

Get alerted when CVE-2022-46140 or the next vulnerability affects your stack