CVEvulnerability
CVE-2022-2052
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
Affected configurations
• trumpf job order interface
• trumpf oseon (<= 1.6)
• trumpf trutops boost
• trumpf trutops fab
• trumpf trutops monitor
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://cert.vde.com/en/advisories/VDE-2022-023/ Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-023/ Third Party Advisory