← Back

CVE-2022-31619

nvd nist
Published: Jun 14, 2022Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.

Affected (6)

Products: Siemens: Teamcenter
1 product
Teamcenter
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
From 12.4 to 12.4.0.13
From 13.0 to 13.0.0.9
From 13.1 to 13.1.0.9
From 13.2 to 13.2.0.9
From 13.3 to 13.3.0.3
From 14.0 to 14.0.0.2

References (2)

Source: productcert@siemens.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.