Critical severity · published Oct 17, 2022
CVE-2022-2052
TRUMPF TruTops default user accounts vulnerability
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Job Order Interface · TRUMPF Werkzeugmaschinen SE + Co. KG
All Versions · source: vendor, NVD
OS
Oseon · TRUMPF Werkzeugmaschinen SE + Co. KG
through 1.6 · source: vendor, NVD
TB
TruTops Boost with option Graphic separation of cut parts · TRUMPF Werkzeugmaschinen SE + Co. KG
All Versions · source: vendor
TB
TruTops Boost with option Inventory of sheets and remainder sheets · TRUMPF Werkzeugmaschinen SE + Co. KG
All Versions · source: vendor
TF
TruTops Fab · TRUMPF Werkzeugmaschinen SE + Co. KG
All Versions · source: vendor, NVD
TM
TruTops Monitor · TRUMPF Werkzeugmaschinen SE + Co. KG
All Versions · source: vendor, NVD
TB
Trutops Boost · Trumpf
All versions, or not specified · source: NVD
Affected product
JO
Job Order Interface
TRUMPF Werkzeugmaschinen SE + Co. KG