A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.
References
Link | Resource |
---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Feb 2023, 17:41
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:siemens:teamcenter:13.2:*:*:*:*:*:*:* |
10 Aug 2022, 12:15
Type | Values Removed | Values Added |
---|---|---|
Summary | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions. |
23 Jun 2022, 14:53
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:siemens:teamcenter:13.2:*:*:*:*:*:*:* cpe:2.3:a:siemens:teamcenter:14.0:*:*:*:*:*:*:* cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 8.8 |
CWE | CWE-798 | |
References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf - Patch, Vendor Advisory |
14 Jun 2022, 10:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-06-14 10:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-31619
Mitre link : CVE-2022-31619
CVE.ORG link : CVE-2022-31619
JSON object : View
Products Affected
siemens
- teamcenter
CWE
CWE-798
Use of Hard-coded Credentials