SB2022121925 - Multiple vulnerabilities in Siemens SCALANCE Products
Published: December 19, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 vulnerabilities.
1) Storing passwords in a recoverable format (CVE-ID: CVE-2022-46142)
CWE-ID: CWE-257 - Storing Passwords in a Recoverable Format
CVSSv4: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local attacker to decrypt passwords.
The vulnerability exists due to the affected device stores the CLI user passwords encrypted in flash memory. An attacker with physical access can retrieve the file and decrypt the CLI user passwords.
2) Input validation error (CVE-ID: CVE-2022-46143)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a remote user to gain access to sensitive information on the system.
The vulnerability exists due to the affected device does not check the TFTP blocksize correctly. A remote administrator can read from an uninitialized buffer that potentially contains previously allocated data.
3) Improper control of a resource through its lifetime (CVE-ID: CVE-2022-46144)
CWE-ID: CWE-664 - Improper control of a resource through its lifetime
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the affected device does not properly process CLI commands after a user forcefully quitted the SSH connection. A remote user can cause a denial of service condition on the target system.
Remediation
Install update from vendor's website.