Scalance W1788-1 M12 Firmware Security Vulnerabilities and Issues — Scalance W1788-1 M12 Firmware CVE List

Lucene search

SiemensScalance W1788-1 M12 Firmware

6 matches found

CVE•added 2022/04/12 9:15 a.m.•80 views

CVE-2022-28329

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP pack...

6.5CVSS6.3AI score0.00257EPSS

CVE•added 2022/12/13 4:15 p.m.•79 views

CVE-2022-46142

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

5.7CVSS5.3AI score0.0006EPSS

CVE•added 2022/12/13 4:15 p.m.•77 views

CVE-2022-46140

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

7.1CVSS6.2AI score0.00087EPSS

CVE•added 2022/12/13 4:15 p.m.•70 views

CVE-2022-46143

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

5.1CVSS3.7AI score0.00216EPSS

CVE•added 2022/04/12 9:15 a.m.•68 views

CVE-2022-27481

5.7CVSS5.1AI score0.00195EPSS

CVE•added 2022/04/12 9:15 a.m.•68 views

CVE-2022-28328

7.8CVSS7.2AI score0.00552EPSS