by Kastro
Paper/Archive/CVE-2022-2052

CVE-2022-2052

TRUMPF Werkzeugmaschinen SE + Co. KG TruTops Monitor — TRUMPF TruTops default user accounts vulnerability

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.0.550 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Affected

ProductAffectedFixed inSource
TruTops MonitorAll Versions–CNA
TruTops FabAll Versions–CNA
Oseonunspecified – 1.6–CNA
Job Order InterfaceAll Versions–CNA
TruTops Boost with option Inventory of sheets and remainder sheetsAll Versions–CNA
TruTops Boost with option Graphic separation of cut partsAll Versions–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcert.vde.com/en/advisories/VDE-2022-023