« Volver al listado

CVE-2022-1300

Estado: ModificadaCrítica (9.8)—

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Trumpf — Trutops BoostTrumpf — Trutops FABTrumpf — Trutops Monitor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-1300",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "TRUMPF",
          "product": "TruTops Boost",
          "versions": [
            {
              "status": "affected",
              "version": "V13.01",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "V13.05"
            },
            {
              "status": "affected",
              "version": "V13.08.21"
            }
          ]
        },
        {
          "vendor": "TRUMPF",
          "product": "TruTops Fab (incl. TruTops Monitor)",
          "versions": [
            {
              "status": "affected",
              "version": "V22.01.",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "V22.05."
            },
            {
              "status": "affected",
              "version": "V22.08.21"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-05-02T12:16:26.433",
  "references": [
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2022-016/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "info@cert.vde.com"
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2022-016/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service."
    },
    {
      "lang": "es",
      "value": "Varias versiones de los productos TRUMPF TruTops exponen una función de servicio sin la autenticación necesaria. La ejecución de esta función puede resultar en un acceso no autorizado a la modificación de datos o a la interrupción de todo el servicio"
    }
  ],
  "lastModified": "2026-06-17T04:22:10.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_boost:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3BBFC27-AE59-4232-99AA-183E9B4309DB",
              "versionEndIncluding": "13.05",
              "versionStartIncluding": "13.01"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_boost:13.08.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9189E82C-EE99-42CA-AF41-3F9FC6809DDC"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_fab:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60159EAB-0C92-4A26-A099-D6C2379E1054",
              "versionEndIncluding": "22.05",
              "versionStartIncluding": "22.01"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_fab:22.08.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74EC4E85-27E9-4F18-8A85-0C93573F4DCB"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_monitor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B86EF581-7BB8-4D87-A8EC-7A16BAAF065E",
              "versionEndIncluding": "22.05",
              "versionStartIncluding": "22.01"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_monitor:22.08.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04B80E74-C2DB-4A52-B2F2-4A8406A0D8A6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "info@cert.vde.com"
}