CVE-2022-34660
6.8
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Summary
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | Teamcenter V12.4 | All versions < V12.4.0.15 | affected |
| Siemens | Teamcenter V13.0 | All versions < V13.0.0.10 | affected |
| Siemens | Teamcenter V13.1 | All versions < V13.1.0.10 | affected |
| Siemens | Teamcenter V13.2 | All versions < V13.2.0.9 | affected |
| Siemens | Teamcenter V13.3 | All versions < V13.3.0.5 | affected |
| Siemens | Teamcenter V14.0 | All versions < V14.0.0.2 | affected |
Weaknesses
- CWE-77: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.