CVE-2022-1300

CRITICAL

9.8

Description

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/2/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

trumpf:trutops_boosttrumpf:trutops_fabtrumpf:trutops_monitor

Weaknesses (CWE)

CWE-306

References

https://cert.vde.com/en/advisories/VDE-2022-016/(info@cert.vde.com)

https://cert.vde.com/en/advisories/VDE-2022-016/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.