Exposure of Encrypted Passwords in Siemens Devices
CVE-2022-46142
5.2MEDIUM
Key Information:
- Vendor
- Siemens
- Status
- Vendor
- CVE Published:
- 13 December 2022
Summary
A security vulnerability exists in Siemens devices that allows attackers with physical access to extract and decrypt CLI user passwords stored in flash memory. This could lead to unauthorized access to device management functions, highlighting the importance of securing physical access to devices.
Affected Version(s)
RUGGEDCOM RM1224 LTE(4G) EU 0
RUGGEDCOM RM1224 LTE(4G) NAM 0
SCALANCE M804PB 0
References
CVSS V4
Score:
5.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved