VDB
CVE-2022-31619
CVE-2022-31619
PUBLISHED
CVSS 8.800000190734863 HIGH
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.
EPSS 1.22% · 79.4th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.22%
79.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Teamcenter V13.2 | All versions < V13.2.0.9 |
| Siemens | Teamcenter V13.3 | All versions < V13.3.0.3 |
| Siemens | Teamcenter V13.0 | All versions < V13.0.0.9 |
| siemens | teamcenter | 13.1, 13.2, 13.3 |
| Siemens | Teamcenter V13.1 | All versions < V13.1.0.9 |
| Siemens | Teamcenter V12.4 | All versions < V12.4.0.13 |
| Siemens | Teamcenter V14.0 | All versions < V14.0.0.2 |
Exploit Intelligence
- https://cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf (circl)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
- Linux_Exploit_CVE_2021_4034.yar (github-yara)
…and 51 more exploits
Timeline
- Jun 14, 2022 CVE Published
- Jun 15, 2022 EPSS Score
- Jun 24, 2022 EPSS Score
- Aug 3, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Dec 25, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 31, 2023 EPSS Score
- May 18, 2023 EPSS Score
- Aug 23, 2023 EPSS Score
- Oct 10, 2023 EPSS Score
References
- https://cert-portal.siemens.com/productcert/html/ssa-148078.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-220589.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-988345.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-484086.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-330556.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-145224.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-685781.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-693555.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-911567.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-401167.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-764417.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-712929.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-679335.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-388239.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-631336.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-740594.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-222547.html advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-220589.pdf url
- https://nvd.nist.gov/vuln/detail/CVE-2022-31619 advisory