A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Jul 2022, 18:52
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:* | |
| CWE | CWE-287 | |
| First Time |
Siemens opcenter Quality
Siemens |
12 Jul 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials. |
12 Jul 2022, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-12 10:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-33736
Mitre link : CVE-2022-33736
CVE.ORG link : CVE-2022-33736
JSON object : View
Products Affected
siemens
- opcenter_quality