← Database

CVE-2022-46140

MEDIUM CVSS: 6.5 Published: 2022-12-13 Modified: 2026-06-17

Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Affected Platforms

Siemens Scalance W778-1 M12 Eec FirmwareSiemens Scalance Xp216Siemens Scalance Wum766-1Siemens Scalance W786-2 SfpSiemens Scalance W788-2 M12 EecSiemens Scalance Xb213-3Ld FirmwareSiemens Scalance Wam766-1 6Ghz FirmwareSiemens Scalance M874-3Siemens Scalance Xp216EecSiemens Scalance Xc206-2Sfp Firmware

Weakness Type

CWE-327, CWE-327

References