CVE-2022-46142: Siemens Ruggedcom RM1224 lte(4g) Eu Firmware

Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Affected products

  • Siemens Ruggedcom RM1224 lte(4g) Eu Firmware: any version
  • Siemens Ruggedcom RM1224 lte(4g) Nam Firmware: any version
  • Siemens Scalance m804pb Firmware: any version
  • Siemens Scalance m812-1 Adsl-Router Firmware: any version
  • Siemens Scalance m816-1 Adsl-Router Firmware: any version
  • Siemens Scalance m826-2 Shdsl-Router Firmware: any version
  • Siemens Scalance m874-2 Firmware: any version
  • Siemens Scalance m874-3 Firmware: any version
  • Siemens Scalance m876-3 Firmware: any version
  • Siemens Scalance m876-4 Firmware: any version
  • Siemens Scalance MUM853-1 Firmware: any version
  • Siemens Scalance MUM856-1 Firmware: any version
  • Siemens Scalance s615 Eec Firmware: any version
  • Siemens Scalance s615 Firmware: any version
  • Siemens Scalance SC622-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance SC626-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance SC632-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance SC636-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance SC642-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance SC646-2c Firmware: before 2.3 (fixed in 2.3)
  • Siemens Scalance w1748-1 m12 Firmware: affected versions not specified
  • Siemens Scalance w1788-1 m12 Firmware: affected versions not specified
  • Siemens Scalance w1788-2 Eec m12 Firmware: affected versions not specified
  • Siemens Scalance w1788-2 m12 Firmware: affected versions not specified
  • Siemens Scalance w1788-2ia m12 Firmware: affected versions not specified
  • and 76 more

Published 2022-12-13. Last modified 2026-06-17.