Vulnerability in Siemens Teamcenter
CVE-2022-31619
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.013 (69.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Siemens Teamcenter
- Siemens Teamcenter V12.4 — versions All versions < V12.4.0.13
- Siemens Teamcenter V13.0 — versions All versions < V13.0.0.9
- Siemens Teamcenter V13.1 — versions All versions < V13.1.0.9
- Siemens Teamcenter V13.2 — versions All versions < V13.2.0.9
- Siemens Teamcenter V13.3 — versions All versions < V13.3.0.3
- Siemens Teamcenter V14.0 — versions All versions < V14.0.0.2
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-31619?
- CVE-2022-31619 is a high-severity vulnerability in Siemens Teamcenter, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2022-06-14.
- How severe is CVE-2022-31619?
- High severity. CVSS v3 base score is 8.8 out of 10.