CVE-2022-46143
CVSS 3.1 Score 2.7 of 10 (low)
Details
Published Dec 13, 2022
Updated: Jan 14, 2025
CWE ID 1284
Summary
CVE-2022-46143 is a vulnerability affecting certain devices that fail to verify TFTP (Trivial File Transfer Protocol) blocksize correctly. An authenticated attacker can exploit this issue by reading data from an uninitialized buffer, potentially gaining access to previously allocated information. This vulnerability poses a serious risk for confidentiality and could lead to potential data leaks. It is recommended that affected organizations apply the necessary patches to mitigate this issue and secure their networks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Siemens AG