What’s Vulnerable › Vulnerabilities

CVE-2022-2052: TRUMPF TruTops default user accounts vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-17 · updated 2026-06-17
• Weakness: CWE-284

Description

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Affected products

• TRUMPF Job Order Interface: all versions
• TRUMPF Oseon: through 1.6
• TRUMPF TruTops Boost: all versions
• TRUMPF Trutops Fab: all versions
• TRUMPF Trutops Monitor: all versions

References

• https://cert.vde.com/en/advisories/VDE-2022-023/
• https://cert.vde.com/en/advisories/VDE-2022-023/

Get alerted when CVE-2022-2052 or the next vulnerability affects your stack