CVE:CVE-2022-2052
CNNVD:CNNVD-202210-1061
TRUMPF TruTops等都是TRUMPF的产品。TRUMPF TruTops是TRUMPF Oseon是一个生产和物料流控制的综合解决方案。TRUMPF Job Order Interface是一个软件工作订单界面。
多款TRUMPF产品存在安全漏洞，该漏洞源于使用默认的特权 Windows 用户和密码，攻击者利用该漏洞可以使用这些帐户远程获得对系统的完全访问权限，以下产品和版本受到影响：Job Order Interface、 Oseon 1.6及之前版本、TruTops Boost with option Graphic separation of cut parts、TruTops Boost with option Inventory of sheets and remainder sheets、TruTops Fab、TruTops Monitor。
solution:Upgrade trumpf job_order_interface to a higher version than *; Upgrade trumpf oseon to a higher version than 1.6,and avoid the version (,1.6]; Upgrade trumpf trutops_boost to a higher version than *; Upgrade trumpf trutops_fab to a higher version than *; Upgrade trumpf trutops_monitor to a higher version than *