« Volver al listado

CVE-2022-33736

Estado: ModificadaAlta (7.5)—

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Siemens — Opcenter Quality

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-33736",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "Opcenter Quality V13.1",
          "versions": [
            {
              "status": "affected",
              "version": "All versions  < V13.1.20220624"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "Opcenter Quality V13.2",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V13.2.20220624"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-12T10:15:10.813",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-303"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en Opcenter Quality V13.1 (Todas las versiones anteriores a V13.1.20220624), Opcenter Quality V13.2 (Todas las versiones anteriores a V13.2.20220624). Las aplicaciones afectadas no comprueban apropiadamente la información de inicio de sesión durante la autenticación. Esto podría conllevar a una condición de denegación de servicio para usuarios existentes o permitir a atacantes remotos no autenticados iniciar sesión con éxito sin credenciales"
    }
  ],
  "lastModified": "2026-06-17T04:49:20.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A15CE102-4776-4D10-8AF2-8F4401AB7797",
              "versionEndExcluding": "13.1.20220624",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A01A975E-7898-4E21-AFCA-A786D546D959",
              "versionEndExcluding": "13.2.20220624",
              "versionStartIncluding": "13.2.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}