Description (CNA)
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / RUGGEDCOM RM1224 LTE(4G) EU | affected 0 before V7.2 |
| Siemens / RUGGEDCOM RM1224 LTE(4G) EU | affected 0 before V8.0 |
| Siemens / RUGGEDCOM RM1224 LTE(4G) NAM | affected 0 before V7.2 |
| Siemens / RUGGEDCOM RM1224 LTE(4G) NAM | affected 0 before V8.0 |
| Siemens / SCALANCE M804PB | affected 0 before V7.2 |
| Siemens / SCALANCE M804PB | affected 0 before V8.0 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V8.0 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M812-1 ADSL-Router | affected 0 before V8.0 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V8.0 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M816-1 ADSL-Router | affected 0 before V8.0 |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected 0 before V7.2 |
| Siemens / SCALANCE M826-2 SHDSL-Router | affected 0 before V8.0 |
| Siemens / SCALANCE M874-2 | affected 0 before V7.2 |
| Siemens / SCALANCE M874-2 | affected 0 before V8.0 |
| Siemens / SCALANCE M874-3 | affected 0 before V7.2 |
| Siemens / SCALANCE M874-3 | affected 0 before V8.0 |
| Siemens / SCALANCE M876-3 | affected 0 before V7.2 |
| Siemens / SCALANCE M876-3 | affected 0 before V8.0 |
| Siemens / SCALANCE M876-3 (ROK) | affected 0 before V7.2 |
| Siemens / SCALANCE M876-3 (ROK) | affected 0 before V8.0 |
| Siemens / SCALANCE M876-4 | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 | affected 0 before V8.0 |
| Siemens / SCALANCE M876-4 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 (EU) | affected 0 before V8.0 |
| Siemens / SCALANCE M876-4 (NAM) | affected 0 before V7.2 |
| Siemens / SCALANCE M876-4 (NAM) | affected 0 before V8.0 |
| Siemens / SCALANCE MUM853-1 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM853-1 (EU) | affected 0 before V8.0 |
| Siemens / SCALANCE MUM856-1 (EU) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM856-1 (EU) | affected 0 before V8.0 |
| Siemens / SCALANCE MUM856-1 (RoW) | affected 0 before V7.2 |
| Siemens / SCALANCE MUM856-1 (RoW) | affected 0 before V8.0 |
| Siemens / SCALANCE S615 EEC LAN-Router | affected 0 before V7.2 |
| Siemens / SCALANCE S615 EEC LAN-Router | affected 0 before V8.0 |
| Siemens / SCALANCE S615 LAN-Router | affected 0 before V7.2 |
| Siemens / SCALANCE S615 LAN-Router | affected 0 before V8.0 |
| Siemens / SCALANCE SC622-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC622-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE SC626-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC626-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE SC632-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC632-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE SC636-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC636-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE SC642-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC642-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE SC646-2C | affected 0 before V2.3 |
| Siemens / SCALANCE SC646-2C | affected V2.3 before V3.0 |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 EEC M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2 M12 | affected 0 before * |
| Siemens / SCALANCE W1788-2IA M12 | affected 0 before * |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W721-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W722-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W734-1 RJ45 (USA) | affected 0 before * |
| Siemens / SCALANCE W738-1 M12 | affected 0 before * |
| Siemens / SCALANCE W738-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 M12 | affected 0 before * |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W748-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W761-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W774-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W774-1 RJ45 (USA) | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 EEC | affected 0 before * |
| Siemens / SCALANCE W778-1 M12 EEC (USA) | affected 0 before * |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2 SFP | affected 0 before * |
| Siemens / SCALANCE W786-2 SFP | affected 0 before * |
| Siemens / SCALANCE W786-2IA RJ45 | affected 0 before * |
| Siemens / SCALANCE W786-2IA RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W788-1 M12 | affected 0 before * |
| Siemens / SCALANCE W788-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-1 RJ45 | affected 0 before * |
| Siemens / SCALANCE W788-2 M12 | affected 0 before * |
CWE
CWE-1284
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-413565.html
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
ADP enrichment
No English description supplied.