VULNERABILITY INTELLIGENCE

CVE-2022-46140

CVSS score6.5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Weakness classification

  • productcert@siemens.com: CWE-327
  • nvd@nist.gov: CWE-327

Primary references