What is CVE-2022-33736?

CVE-2022-33736 is a high-severity vulnerability in Siemens Opcenter Quality, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 7.5/10. Published 2022-07-12.

How severe is CVE-2022-33736?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Siemens Opcenter Quality

CVE-2022-33736

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.

EPSS: 0.012 (66.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Siemens Opcenter_quality
Siemens Opcenter Quality V13.1 — versions All versions < V13.1.20220624
Siemens Opcenter Quality V13.2 — versions All versions < V13.2.20220624

Weakness classification (CWE)

References

productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-33736?: CVE-2022-33736 is a high-severity vulnerability in Siemens Opcenter Quality, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 7.5/10. Published 2022-07-12.
How severe is CVE-2022-33736?: High severity. CVSS v3 base score is 7.5 out of 10.