CVE-2022-46142 — Affected devices store the CLI user passwords encrypted in flash memory

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

01What is this vulnerability?

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

02Affected products

Vendor	Product	Versions
Siemens	RUGGEDCOM RM1224 LTE(4G) EU	0
Siemens	RUGGEDCOM RM1224 LTE(4G) NAM	0
Siemens	SCALANCE M804PB	0
Siemens	SCALANCE M812	1 ADSL-Router — 0
Siemens	SCALANCE M812	1 ADSL-Router — 0
Siemens	SCALANCE M816	1 ADSL-Router — 0
Siemens	SCALANCE M816	1 ADSL-Router — 0
Siemens	SCALANCE M826	2 SHDSL-Router — 0
Siemens	SCALANCE M874	2 — 0
Siemens	SCALANCE M874	3 — 0
Siemens	SCALANCE M876	3 — 0
Siemens	SCALANCE M876	3 (ROK) — 0
Siemens	SCALANCE M876	4 — 0
Siemens	SCALANCE M876	4 (EU) — 0
Siemens	SCALANCE M876	4 (NAM) — 0
Siemens	SCALANCE MUM853	1 (EU) — 0
Siemens	SCALANCE MUM856	1 (EU) — 0
Siemens	SCALANCE MUM856	1 (RoW) — 0
Siemens	SCALANCE S615 EEC LAN	Router — 0
Siemens	SCALANCE S615 LAN	Router — 0
Siemens	SCALANCE SC622	2C — 0
Siemens	SCALANCE SC622	2C — V2.3
Siemens	SCALANCE SC626	2C — 0
Siemens	SCALANCE SC626	2C — V2.3
Siemens	SCALANCE SC632	2C — 0
Siemens	SCALANCE SC632	2C — V2.3
Siemens	SCALANCE SC636	2C — 0
Siemens	SCALANCE SC636	2C — V2.3
Siemens	SCALANCE SC642	2C — 0
Siemens	SCALANCE SC642	2C — V2.3
Siemens	SCALANCE SC646	2C — 0
Siemens	SCALANCE SC646	2C — V2.3
Siemens	SCALANCE W1748	1 M12 — 0
Siemens	SCALANCE W1748	1 M12 — 0
Siemens	SCALANCE W1788	1 M12 — 0
Siemens	SCALANCE W1788	2 EEC M12 — 0
Siemens	SCALANCE W1788	2 M12 — 0
Siemens	SCALANCE W1788	2IA M12 — 0
Siemens	SCALANCE W721	1 RJ45 — 0
Siemens	SCALANCE W721	1 RJ45 — 0
Siemens	SCALANCE W722	1 RJ45 — 0
Siemens	SCALANCE W722	1 RJ45 — 0
Siemens	SCALANCE W722	1 RJ45 — 0
Siemens	SCALANCE W734	1 RJ45 — 0
Siemens	SCALANCE W734	1 RJ45 — 0
Siemens	SCALANCE W734	1 RJ45 — 0
Siemens	SCALANCE W734	1 RJ45 (USA) — 0
Siemens	SCALANCE W738	1 M12 — 0
Siemens	SCALANCE W738	1 M12 — 0
Siemens	SCALANCE W748	1 M12 — 0

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

• Published: 2022-12-13T00:00:00.000Z
• Last modified: 2025-04-21T13:43:06.184Z

09References

• cert-portal.siemens.com — https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
• cert-portal.siemens.com — https://cert-portal.siemens.com/productcert/html/ssa-413565.html