Exposure of Encrypted Passwords in Siemens Devices
CVE-2022-46142
5.2MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 13 December 2022
What is CVE-2022-46142?
A security vulnerability exists in Siemens devices that allows attackers with physical access to extract and decrypt CLI user passwords stored in flash memory. This could lead to unauthorized access to device management functions, highlighting the importance of securing physical access to devices.
Affected Version(s)
RUGGEDCOM RM1224 LTE(4G) EU 0
RUGGEDCOM RM1224 LTE(4G) NAM 0
SCALANCE M804PB 0