« Volver al listado

CVE-2022-2052

Estado: ModificadaCrítica (9.8)—

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Trumpf — JOB Order InterfaceTrumpf — OseonTrumpf — Trutops BoostTrumpf — Trutops FABTrumpf — Trutops Monitor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-2052",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-2052",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-10T02:57:27.303845Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "TruTops Monitor",
          "versions": [
            {
              "status": "affected",
              "version": "All Versions"
            }
          ]
        },
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "TruTops Fab",
          "versions": [
            {
              "status": "affected",
              "version": "All Versions"
            }
          ]
        },
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "Oseon",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "1.6"
            }
          ]
        },
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "Job Order Interface",
          "versions": [
            {
              "status": "affected",
              "version": "All Versions"
            }
          ]
        },
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "TruTops Boost with option Inventory of sheets and remainder sheets",
          "versions": [
            {
              "status": "affected",
              "version": "All Versions"
            }
          ]
        },
        {
          "vendor": "TRUMPF Werkzeugmaschinen SE + Co. KG",
          "product": "TruTops Boost with option Graphic separation of cut parts",
          "versions": [
            {
              "status": "affected",
              "version": "All Versions"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-10-17T09:15:12.150",
  "references": [
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2022-023/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "info@cert.vde.com"
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2022-023/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system."
    },
    {
      "lang": "es",
      "value": "Varios productos de Trumpf en múltiples versiones usan usuarios y contraseñas privilegiados de Windows por defecto. Un adversario puede usar estas cuentas para conseguir acceso completo al sistema de forma remota"
    }
  ],
  "lastModified": "2026-06-17T04:41:11.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trumpf:job_order_interface:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23618C14-F7A5-46D5-9861-1439F197622A"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:oseon:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "806F1D17-51DF-431D-B34B-7EC4FA7D5873",
              "versionEndIncluding": "1.6"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_boost:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FE4279B-0D8E-4B0E-8D38-A3AF0C90A0C5"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_fab:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52F57117-C6A3-426E-9AE9-E47596BB0E40"
            },
            {
              "criteria": "cpe:2.3:a:trumpf:trutops_monitor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5114C779-4A9D-4F09-AFBD-42DB013E063A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "info@cert.vde.com"
}