← Database

CVE-2022-46143

LOW CVSS: 2.7 Published: 2022-12-13 Modified: 2026-06-17

Description

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Affected Platforms

Siemens Scalance W778-1 M12 Eec FirmwareSiemens Scalance Xp216Siemens Scalance Wum766-1Siemens Scalance W786-2 SfpSiemens Scalance W788-2 M12 EecSiemens Scalance Xb213-3Ld FirmwareSiemens Scalance Wam766-1 6Ghz FirmwareSiemens Scalance M874-3Siemens Scalance Xp216EecSiemens Scalance Xc206-2Sfp Firmware

Weakness Type

CWE-1284, CWE-1284

References