Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-1300 EUVD-2022-24628GHSA-p7x3-m8gr-5hqm

Missing authentication in TRUMPF products may result in corruption of data

Published May 2, 2022 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

Affected products

VendorProductAffectedFixed
TRUMPF TruTops Boost V13.01 – < unspecified, unspecified – ≤ V13.05, V13.08.21 unspecified
TRUMPF TruTops Fab (incl. TruTops Monitor) V22.01. – < unspecified, unspecified – ≤ V22.05., V22.08.21 unspecified

Advisories 1

References