CRITICAL🇵🇱 Wersja polska

CVE-2022-2052

CVSS 9.8v3.1pub. 2022-10-17upd. 2024-11-21

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Trumpf Job Order Interface

    APP
    Trumpf
    all versions

  • Trumpf Oseon

    APP
    Trumpf
    ≤ 1.6

  • Trumpf Trutops Boost

    APP
    Trumpf
    all versions

  • Trumpf Trutops Fab

    APP
    Trumpf
    all versions

  • Trumpf Trutops Monitor

    APP
    Trumpf
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-3935CRITICAL9.8PL ✓same product

Krytyczny heap buffer overflow w Wibu CodeMeter Runtime umożliwiający RCE

CVE-2022-1300CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w funkcji serwisowej produktów TRUMPF TruTops