CVE-2022-2052
TRUMPF TruTops default user accounts vulnerability
Vexday Risk Score
28Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 9.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
17 out 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
TRUMPF Werkzeugmaschinen SE + Co. KG · Job Order InterfaceTRUMPF Werkzeugmaschinen SE + Co. KG · OseonTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Boost with option Graphic separation of cut partsTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Boost with option Inventory of sheets and remainder sheetsTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops FabTRUMPF Werkzeugmaschinen SE + Co. KG · TruTops Monitor