Description
Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TRUMPF Werkzeugmaschinen SE + Co. KG | TruTops Monitor | All Versions | — |
| TRUMPF Werkzeugmaschinen SE + Co. KG | TruTops Fab | All Versions | — |
| TRUMPF Werkzeugmaschinen SE + Co. KG | Oseon | unspecified – ≤ 1.6 | — |
| TRUMPF Werkzeugmaschinen SE + Co. KG | Job Order Interface | All Versions | — |
| TRUMPF Werkzeugmaschinen SE + Co. KG | TruTops Boost with option Inventory of sheets and remainder sheets | All Versions | — |
| TRUMPF Werkzeugmaschinen SE + Co. KG | TruTops Boost with option Graphic separation of cut parts | All Versions | — |
Advisories 1
- VDE-2022-023 TRUMPF TruTops prone to improper access control CERT@VDE · Oct 17, 2022