Skip to content
OpenAdvisories
High VDE-2024-005 1 CVE

TRUMPF: Multiple products contain vulnerable version of 7-zip

Published Jan 23, 2024 · Updated Jun 5, 2025 · Revision 2

Vendor: TRUMPF Product: Boost Product: FAB (Storage) Product: FAB-Boost mixed installation Product: Oseon (Storage) Product: Oseon-Boost mixed installation Product: TruTops Cell Product: TruTops Classic Product: TruTops Mark

Summary

Under certain circumstances, opening a specially crafted 7-zip package can exploit an integer
underflow vulnerability in 7-zip versions up to and including 22.x

This vulnerability allows for a remote code execution, resulting in unauthorized (remote) access to,
change of data or disruption of the whole service.

Details

Impact
The stated TRUMPF products include a vulnerable version of 7-zip which can be exploited to take overthe server they're installed on. This can impact confidentiality, integrity and availability of information onthe affected system.

Remediation
Please download the replacement tool.
For additional questions please contact your TRUMPF Service with the PR number 501709.

Vulnerabilities 1

Revision history

  1. #2

    Fix: quotation mark

  2. #1

    Initial revision.

References