CVE-2022-1300 — Missing authentication in TRUMPF products may result in corruption of data

CVE-2022-1300

Missing authentication in TRUMPF products may result in corruption of data PUBLISHED

Description (CNA)

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

Affected (CNA)

Vendor / product	Versions
TRUMPF / TruTops Boost	affected V13.01 before unspecified; affected unspecified through V13.05; affected V13.08.21
TRUMPF / TruTops Fab (incl. TruTops Monitor)	affected V22.01. before unspecified; affected unspecified through V22.05.; affected V22.08.21

CWE

CWE-306

References

https://cert.vde.com/en/advisories/VDE-2022-016/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2022-016/