VDE-2022-023
Last update
17.10.2022 12:00
Published at
17.10.2022 12:00
Vendor(s)
Trumpf SE + Co. KG
External ID
VDE-2022-023
CSAF Document
Summary
During the installation of specific TRUMPF Windows applications, privileged local users with default usernames and passwords are created. An adversary could use these users to access and compromise the affected Windows systems and, under certain circumstances, other network resources.
Impact
Privileged local users with default usernames and passwords can be used to access and compromise affected Windows PCs and possibly other network resources.
Affected Product(s)
| Model no. | Product name | Affected versions |
|---|---|---|
| Job Order Interface | Firmware vers:all/* | |
| Oseon | Firmware <=1.6 | |
| TruTops Boost with option Graphic separation of cut parts | Firmware vers:all/* | |
| TruTops Boost with option Inventory of sheets and remainder sheets | Firmware vers:all/* | |
| TruTops Fab | Firmware vers:all/* | |
| TruTops Monitor | Firmware vers:all/* |
Vulnerabilities
Expand / Collapse allRemediation
Please contact your TRUMPF Service with the PR number 496330.
Revision History
| Version | Date | Summary |
|---|---|---|
| 1 | 17.10.2022 12:00 | initial revision |