CVE-2022-2052

TRUMPF TruTops default user accounts vulnerability

State: Published
Severity: 9.8 Critical
Published: Oct 17, 2022
Updated: May 10, 2025
Reserved: Jun 10, 2022

Description

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
TruTops MonitorTRUMPF Werkzeugmaschinen SE + Co. KG	All VersionsAffected
TruTops FabTRUMPF Werkzeugmaschinen SE + Co. KG	All VersionsAffected
OseonTRUMPF Werkzeugmaschinen SE + Co. KG	1.6 and earlierAffected
Job Order InterfaceTRUMPF Werkzeugmaschinen SE + Co. KG	All VersionsAffected
TruTops Boost with option Inventory of sheets and remainder sheetsTRUMPF Werkzeugmaschinen SE + Co. KG	All VersionsAffected
TruTops Boost with option Graphic separation of cut partsTRUMPF Werkzeugmaschinen SE + Co. KG	All VersionsAffected

References

https://cert.vde.com/en/advisories/VDE-2022-023/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.