CVE-2022-2052

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Score

CVSS 3.1 9.8 Critical

Status

Modified - info@cert.vde.com

Published

2022-10-17

Last modified

2025-05-10

Weaknesses

CWE-284

Affected products

• Job Order Interface (Trumpf)
• Oseon (Trumpf)
• Trutops Boost (Trumpf)
• Trutops Fab (Trumpf)
• Trutops Monitor (Trumpf)
• Job Order Interface (Trumpf Werkzeugmaschinen Se Co. Kg)
• Oseon (Trumpf Werkzeugmaschinen Se Co. Kg)
• Trutops Boost With Option Graphic Separation Of Cut Parts (Trumpf Werkzeugmaschinen Se Co. Kg)
• Trutops Boost With Option Inventory Of Sheets And Remainder Sheets (Trumpf Werkzeugmaschinen Se Co. Kg)
• Trutops Fab (Trumpf Werkzeugmaschinen Se Co. Kg)
• Trutops Monitor (Trumpf Werkzeugmaschinen Se Co. Kg)

References

• https://cert.vde.com/en/advisories/VDE-2022-023/