What is CVE-2022-33736?

CVE-2022-33736 is a high-severity vulnerability in Siemens Opcenter Quality, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 7.5/10. Published 2022-07-12.

How severe is CVE-2022-33736?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Siemens Opcenter Quality

CVE-2022-33736

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.

Published 2022-07-12 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.013 (69.8th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: +0.001

Affected products

Siemens Opcenter Quality
Siemens Opcenter Quality V13.1 — versions All versions < V13.1.20220624
Siemens Opcenter Quality V13.2 — versions All versions < V13.2.20220624

Weakness classification (CWE)

References

cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-33736?: CVE-2022-33736 is a high-severity vulnerability in Siemens Opcenter Quality, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 7.5/10. Published 2022-07-12.
How severe is CVE-2022-33736?: High severity. CVSS v3 base score is 7.5 out of 10.