Lucene search

K
cvelistCERTVDECVELIST:CVE-2022-2052
HistoryOct 17, 2022 - 12:00 a.m.

CVE-2022-2052 TRUMPF TruTops default user accounts vulnerability

2022-10-1700:00:00
CWE-284
CERTVDE
www.cve.org
trumpf
trutops
default user accounts
vulnerability
cve-2022-2052
windows users
passwords
remote access

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

CNA Affected

[
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "TruTops Monitor",
    "versions": [
      {
        "version": "All Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "TruTops Fab",
    "versions": [
      {
        "version": "All Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "Oseon",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "1.6",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "Job Order Interface",
    "versions": [
      {
        "version": "All Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "TruTops Boost with option Inventory of sheets and remainder sheets",
    "versions": [
      {
        "version": "All Versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
    "product": "TruTops Boost with option Graphic separation of cut parts",
    "versions": [
      {
        "version": "All Versions",
        "status": "affected"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

Related for CVELIST:CVE-2022-2052