CVE-2022-34660 — Vulnetix

CVE-2022-34660 PUBLISHED CVSS 6.800000190734863 MEDIUM

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

EPSS 0.86% · 75.4th percentile

Risk Scores

CVSS 3.1

6.800000190734863

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS Score

0.86%

75.4th percentile

Affected Products

Vendor	Product	Versions
Siemens	Teamcenter V13.3	*
Siemens	Teamcenter V13.0	All versions < V13.0.0.10
Siemens	Teamcenter V14.0	All versions < V14.0.0.2
Siemens	Teamcenter V13.1	All versions < V13.1.0.10
siemens	teamcenter	13.2, 13.3, 14.0
Siemens	Teamcenter V13.2	*
Siemens	Teamcenter V12.4	All versions < V12.4.0.15

Exploit Intelligence

https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdf (circl)

Timeline

Aug 9, 2022 CVE Published
Aug 11, 2022 EPSS Score
Aug 16, 2022 EPSS Score
Nov 11, 2022 EPSS Score
Dec 27, 2022 EPSS Score
Feb 12, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 15, 2023 EPSS Score
Jun 30, 2023 EPSS Score
Aug 15, 2023 EPSS Score
Sep 30, 2023 EPSS Score
Jan 1, 2024 EPSS Score

References

Open in Interactive Console →