Lucene search

PRIOn knowledge basePRION:CVE-2022-46140

HistoryDec 13, 2022 - 4:15 p.m.

Information disclosure

2022-12-1316:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

weak encryption

debug zip file

authenticated attacker

system debug info

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

CPENameOperatorVersion
scalance_sc622-2c_firmwarelt2.3
scalance_sc626-2c_firmwarelt2.3
scalance_sc632-2c_firmwarelt2.3
scalance_sc636-2c_firmwarelt2.3
scalance_sc642-2c_firmwarelt2.3
scalance_sc646-2c_firmwarelt2.3

Name	Operator	Version
scalance_sc622-2c_firmware	lt	2.3
scalance_sc626-2c_firmware	lt	2.3
scalance_sc632-2c_firmware	lt	2.3
scalance_sc636-2c_firmware	lt	2.3
scalance_sc642-2c_firmware	lt	2.3
scalance_sc646-2c_firmware	lt	2.3

References

cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf