CRITICAL · 9.8

CVE-2022-1300

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of ...

Vulnerability Description

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TrumpfTrutops Boost>= 13.01, <= 13.05
TrumpfTrutops Fab>= 22.01, <= 22.05
TrumpfTrutops Monitor>= 22.01, <= 22.05

Related Weaknesses (CWE)

References

FAQ

What is CVE-2022-1300?

CVE-2022-1300 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of ...

How severe is CVE-2022-1300?

CVE-2022-1300 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-1300?

Check the references section above for vendor advisories and patch information. Affected products include: Trumpf Trutops Boost, Trumpf Trutops Fab, Trumpf Trutops Monitor.