← Vulnerability feed

Vulnerability record · CVE-2022-46143 · published 13 December 2022

CVE-2022-46143: Siemens ruggedcom rm1224 lte\(4g\) eu firmware vulnerability

Siemens · Ruggedcom Rm1224 Lte\(4g\) Eu Firmware

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

5.1 CVSS 4.0 Medium EPSS 0.75% · top 46.1% CWE-1284 · CWE-1284
5.1CVSS 4.0 base score
0.75%EPSS exploitation probability, 30 days
NoNot in CISA KEV
101Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

101 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert-portal.siemens.com/productcert/html/ssa-180704.html
https://cert-portal.siemens.com/productcert/html/ssa-413565.html
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf Vendor Advisory

Track CVE-2022-46143 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2024-50572Siemens ruggedcom rm1224 lte\(4g\) eu firmware injection vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.67%8.6CVE-2024-50557Siemens ruggedcom rm1224 lte\(4g\) eu firmware improper input validation vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.90%8.6CVE-2024-41976Siemens ruggedcom rm1224 lte\(4g\) eu firmware improper input validation vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.77%8.6CVE-2022-31766Siemens ruggedcom rm1224 firmware improper input validation vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK610…EPSS 1.2%7.3CVE-2024-41977Siemens ruggedcom rm1224 lte\(4g\) eu firmware vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.44%7.1CVE-2024-41978Siemens ruggedcom rm1224 lte\(4g\) eu firmware sensitive information in log file vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.49%7.1CVE-2022-46140Siemens ruggedcom rm1224 lte\(4g\) eu firmware broken cryptographic algorithm vulnerabilityAffected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of th…EPSS 0.25%5.3CVE-2024-50558Siemens ruggedcom rm1224 lte\(4g\) eu firmware improper access control vulnerabilityA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-…EPSS 0.32%

Source: NIST National Vulnerability Database (record CVE-2022-46143), CISA KEV, FIRST EPSS (scores of 2026-10-15). This page is refreshed as NVD updates the record.