CVE-2022-2052
TRUMPF TruTops default user accounts vulnerability
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Oct 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TRUMPF Werkzeugmaschinen SE + Co. KG · Job Order InterfaceTRUMPF Werkzeugmaschinen SE + Co. KG · OseonTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Boost with option Graphic separation of cut partsTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Boost with option Inventory of sheets and remainder sheetsTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops FabTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Monitor