CVE:CVE-2022-1300
CNNVD:CNNVD-202205-1869
TRUMPF TruTops是TRUMPF的用于激光、冲压和折弯机的 2D/3D 设计和编程的独特软件。
TRUMPF TruTops 多款产品存在访问控制错误漏洞，该漏洞源于应用对于某些服务功能没有进行必要的验证。攻击者利用该漏洞可以进行未授权访问和更改数据甚至中断服务。
solution:Upgrade trumpf trutops_boost to a higher version than 13.05,13.08.21,and avoid the version [13.01,13.05],13.08.21; Upgrade trumpf trutops_fab to a higher version than 22.05,22.08.21,and avoid the version [22.01,22.05],22.08.21; Upgrade trumpf trutops_monitor to a higher version than 22.05,22.08.21,and avoid the version [22.01,22.05],22.08.21