CVE-2022-46142

Published Dec 13, 2022

Last updated 2 years ago

Overview

Description
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
Source
productcert@siemens.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
5.7
Impact score
4.7
Exploitability score
0.9
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Severity
MEDIUM

Weaknesses

productcert@siemens.com
CWE-257
nvd@nist.gov
CWE-522

Social media

Hype score
Not currently trending

Configurations