CRITICAL🇵🇱 Wersja polska

CVE-2022-1300

CVSS 9.8v3.1pub. 2022-05-02upd. 2024-11-21

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Trumpf Trutops Boost

    APP
    Trumpf
    13.08.2113.01 – 13.05

  • Trumpf Trutops Fab

    APP
    Trumpf
    22.08.2122.01 – 22.05

  • Trumpf Trutops Monitor

    APP
    Trumpf
    22.08.2122.01 – 22.05
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-2052CRITICAL9.8PL ✓same product

Domyślne uprzywilejowane konta Windows w produktach Trumpf

CVE-2023-3935CRITICAL9.8PL ✓same vendor

Krytyczny heap buffer overflow w Wibu CodeMeter Runtime umożliwiający RCE