← Back

CVE-2022-34660

nvd nist
Published: Aug 10, 2022Modified: Sep 8, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

Affected (6)

Products: Siemens: Teamcenter
Siemens
1 product
Teamcenter
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Teamcenter
From 12.4 to 12.4.0.15
Teamcenter
From 13.0 to 13.0.0.10
Teamcenter
From 13.1 to 13.1.0.10
Teamcenter
From 13.2 to 13.2.0.9
Teamcenter
From 13.3 to 13.3.0.5
Teamcenter
From 14.0 to 14.0.0.2

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

Source: productcert@siemens.com
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.