{"affected":[{"affectedData":[{"product":"TruTops Monitor","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"status":"affected","version":"All Versions"}]},{"product":"TruTops Fab","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"status":"affected","version":"All Versions"}]},{"product":"Oseon","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"lessThanOrEqual":"1.6","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Job Order Interface","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"status":"affected","version":"All Versions"}]},{"product":"TruTops Boost with option Inventory of sheets and remainder sheets","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"status":"affected","version":"All Versions"}]},{"product":"TruTops Boost with option Graphic separation of cut parts","vendor":"TRUMPF Werkzeugmaschinen SE + Co. KG","versions":[{"status":"affected","version":"All Versions"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:trumpf:job_order_interface:*:*:*:*:*:*:*:*","matchCriteriaId":"23618C14-F7A5-46D5-9861-1439F197622A","vulnerable":true},{"criteria":"cpe:2.3:a:trumpf:oseon:*:*:*:*:*:*:*:*","matchCriteriaId":"806F1D17-51DF-431D-B34B-7EC4FA7D5873","versionEndIncluding":"1.6","vulnerable":true},{"criteria":"cpe:2.3:a:trumpf:trutops_boost:*:*:*:*:*:*:*:*","matchCriteriaId":"7FE4279B-0D8E-4B0E-8D38-A3AF0C90A0C5","vulnerable":true},{"criteria":"cpe:2.3:a:trumpf:trutops_fab:*:*:*:*:*:*:*:*","matchCriteriaId":"52F57117-C6A3-426E-9AE9-E47596BB0E40","vulnerable":true},{"criteria":"cpe:2.3:a:trumpf:trutops_monitor:*:*:*:*:*:*:*:*","matchCriteriaId":"5114C779-4A9D-4F09-AFBD-42DB013E063A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system."},{"lang":"es","value":"Varios productos de Trumpf en múltiples versiones usan usuarios y contraseñas privilegiados de Windows por defecto. Un adversario puede usar estas cuentas para conseguir acceso completo al sistema de forma remota"}],"id":"CVE-2022-2052","lastModified":"2026-06-17T04:41:11.803","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-2052","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-05-10T02:57:27.303845Z","version":"2.0.3"}}]},"published":"2022-10-17T09:15:12.150","references":[{"source":"info@cert.vde.com","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-023/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-023/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"info@cert.vde.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}