Approved changes feed: RSS · Atom

cpe:2.3:h:siemens:scalance_w1788-1_m12:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductScalance W1788 1 M12 (fe2a87f6-d0c9-5c4d-8615-8f7d0331eabb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46143 not_vulnerable 2026-06-08 05:50:38.170993 Details available
LOW (2.7)
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-01-14T10:27:11.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46142 not_vulnerable 2026-06-08 05:50:38.050111 Details available
MEDIUM (5.7)
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:43:06.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46140 not_vulnerable 2026-06-08 05:50:37.937426 Details available
MEDIUM (6.5)
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:43:14.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28329 not_vulnerable 2026-06-08 05:42:44.399434 Details available
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
Published: 2022-04-12T09:08:07.000Z
Updated: 2024-08-03T05:48:38.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28328 not_vulnerable 2026-06-08 05:42:44.398444 Details available
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed Multicast LLC frames. This could allow an attacker to trigger a denial of service condition.
Published: 2022-04-12T09:08:06.000Z
Updated: 2024-08-03T05:48:38.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27481 not_vulnerable 2026-06-08 05:41:55.317603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.