Siemens Scalance Wam766 1 6Ghz vulnerabilities
5 vulnerabilities
Known vulnerabilities in Siemens Scalance Wam766 1 6Ghz, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-26140alfaawus036h_firmware+363
EPSS score2.92%
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.CVE-2020-24588aristac-100_firmware+235EPSS score3.61%
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.CVE-2022-46142siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.27%
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.CVE-2022-46143siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+183EPSS score0.75%
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.CVE-2022-46140siemensruggedcom_rm1224_lte\(4g\)_eu_firmware+174EPSS score0.25%
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system.