CVE-2022-46140 MEDIUM

CVE-2022-46140

Vendor Siemens
Product RUGGEDCOM RM1224 LTE(4G) EU
Weakness CWE-327 · Broken crypto
Published December 13, 2022
Last update April 21, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.

Key dates

02Disclosure timeline

December 13, 2022 CVE published
April 21, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-2618 Beetel 777VR1 SSH Service risky encryption CVE-2026-34950 fast-jwt has an incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation CVE-2026-57997 Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration CVE-2026-27804 Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter