Lucene search

K
nvd[email protected]NVD:CVE-2022-34660
HistoryAug 10, 2022 - 12:15 p.m.

CVE-2022-34660

2022-08-1012:15:12
CWE-77
web.nvd.nist.gov
2
cve-2022-34660
teamcenter
v12.4
v13.0
v13.1
v13.2
v13.3
v14.0
command injection
remote code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.8%

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

Affected configurations

Nvd
Node
siemensteamcenterRange12.412.4.0.15
OR
siemensteamcenterRange13.013.0.0.10
OR
siemensteamcenterRange13.113.1.0.10
OR
siemensteamcenterRange13.213.2.0.9
OR
siemensteamcenterRange13.313.3.0.5
OR
siemensteamcenterRange14.014.0.0.2
VendorProductVersionCPE
siemensteamcenter*cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.8%

Related for NVD:CVE-2022-34660