{"id":"CVE-2022-2052","aliases":["EUVD-2022-34353","GHSA-rx57-wv3q-7323"],"status":"published","title":"TRUMPF TruTops default user accounts vulnerability","description":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00768,"percentile":0.55819,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2022-10-17T08:20:11Z","modified":"2026-06-17T04:41:11Z","products":[{"vendor":"trumpf","product":"job_order_interface"},{"vendor":"trumpf","product":"oseon"},{"vendor":"trumpf","product":"trutops_boost"},{"vendor":"trumpf","product":"trutops_fab"},{"vendor":"trumpf","product":"trutops_monitor"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"job order interface"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"oseon"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"trutops boost with option graphic separation of cut parts"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"trutops boost with option inventory of sheets and remainder sheets"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"trutops fab"},{"vendor":"trumpf werkzeugmaschinen se + co. kg","product":"trutops monitor"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-023/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2052"},{"url":"https://github.com/advisories/GHSA-rx57-wv3q-7323"}],"sources":{"cve":[{"id":"CVE-2022-2052","title":"TRUMPF TruTops default user accounts vulnerability","description":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.","status":"published","published":"2022-10-17T08:20:11.346Z","modified":"2025-05-10T02:57:40.699Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-34353","description":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.","status":"published","published":"2022-10-17T08:20:11Z","modified":"2025-05-10T02:57:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:50.201515Z"}],"ghsa":[{"id":"GHSA-rx57-wv3q-7323","title":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords....","description":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.","status":"published","published":"2022-10-17T12:00:27Z","modified":"2023-02-01T05:08:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:50:49.963472Z"}],"nvd":[{"id":"CVE-2022-2052","description":"Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.","status":"published","published":"2022-10-17T09:15:12.15Z","modified":"2026-06-17T04:41:11.803Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:07:30.6869Z"}]}}