CVE-2022-2052 — TRUMPF TruTops default user accounts vulnerability

Description (CNA)

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Affected (CNA)

Vendor / product	Versions
TRUMPF Werkzeugmaschinen SE + Co. KG / TruTops Monitor	affected All Versions
TRUMPF Werkzeugmaschinen SE + Co. KG / TruTops Fab	affected All Versions
TRUMPF Werkzeugmaschinen SE + Co. KG / Oseon	affected unspecified through 1.6
TRUMPF Werkzeugmaschinen SE + Co. KG / Job Order Interface	affected All Versions
TRUMPF Werkzeugmaschinen SE + Co. KG / TruTops Boost with option Inventory of sheets and remainder sheets	affected All Versions
TRUMPF Werkzeugmaschinen SE + Co. KG / TruTops Boost with option Graphic separation of cut parts	affected All Versions

CWE

CWE-284

References

https://cert.vde.com/en/advisories/VDE-2022-023/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2022-023/

CISA-ADP

No English description supplied.

No references supplied.