CVE-2022-1300: TRUMPF TruTops Boost, заобикаляне на вход и права

Описание

Оригинално описание

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.

Засегнати продукти

• TRUMPF TruTops Boost: V13.01 преди unspecified; unspecified до V13.05; V13.08.21
• TRUMPF TruTops Fab (incl. TruTops Monitor): V22.01. преди unspecified; unspecified до V22.05.; V22.08.21

Вид слабост

• CWE-306 Липсваща автентикация за критична функционалност

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-1300
• https://nvd.nist.gov/vuln/detail/CVE-2022-1300
• https://cert.vde.com/en/advisories/VDE-2022-016/