by Kastro
Paper/Archive/CVE-2022-1300

CVE-2022-1300

TRUMPF TruTops Boost — Missing authentication in TRUMPF products may result in corruption of data

EPSS 2%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.7.747 × 2014.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

Affected

ProductAffectedFixed inSource
TruTops BoostV13.01 – < unspecifiedunspecifiedCNA
TruTops Boostunspecified – V13.05–CNA
TruTops BoostV13.08.21–CNA
TruTops Fab (incl. TruTops Monitor)V22.01. – < unspecifiedunspecifiedCNA
TruTops Fab (incl. TruTops Monitor)unspecified – V22.05.–CNA
TruTops Fab (incl. TruTops Monitor)V22.08.21–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcert.vde.com/en/advisories/VDE-2022-016