CVE-2022-46143: Siemens Ruggedcom RM1224 lte(4g) Eu Firmware

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

Affected products

• Siemens Ruggedcom RM1224 lte(4g) Eu Firmware: any version
• Siemens Ruggedcom RM1224 lte(4g) Nam Firmware: any version
• Siemens Scalance m804pb Firmware: any version
• Siemens Scalance m812-1 Adsl-Router Firmware: any version
• Siemens Scalance m816-1 Adsl-Router Firmware: any version
• Siemens Scalance m826-2 Shdsl-Router Firmware: any version
• Siemens Scalance m874-2 Firmware: any version
• Siemens Scalance m874-3 Firmware: any version
• Siemens Scalance m876-3 Firmware: any version
• Siemens Scalance m876-4 Firmware: any version
• Siemens Scalance MUM853-1 Firmware: any version
• Siemens Scalance MUM856-1 Firmware: any version
• Siemens Scalance s615 Eec Firmware: any version
• Siemens Scalance s615 Firmware: any version
• Siemens Scalance SC622-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance SC626-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance SC632-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance SC636-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance SC642-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance SC646-2c Firmware: before 2.3 (fixed in 2.3)
• Siemens Scalance w1748-1 m12 Firmware: affected versions not specified
• Siemens Scalance w1788-1 m12 Firmware: affected versions not specified
• Siemens Scalance w1788-2 Eec m12 Firmware: affected versions not specified
• Siemens Scalance w1788-2 m12 Firmware: affected versions not specified
• Siemens Scalance w1788-2ia m12 Firmware: affected versions not specified
• and 76 more

Published 2022-12-13. Last modified 2026-06-17.