CVE-2022-33736: High severity siemens opcenter quality vulnerability

Q: What is the severity of CVE-2022-33736?

The severity of CVE-2022-33736 is high with a CVSS score of 7.5.

Q: Which versions of Opcenter Quality are affected by CVE-2022-33736?

Opcenter Quality versions prior to V13.1.20220624 and V13.2.20220624 are affected by CVE-2022-33736.

Q: What is the CWE ID for CVE-2022-33736?

The CWE ID for CVE-2022-33736 is CWE-287 and CWE-303.

Q: How can this vulnerability be exploited?

This vulnerability can be exploited by an attacker who can provide incorrect login information during authentication.

Q: Is there a fix available for CVE-2022-33736?

Yes, the fix for CVE-2022-33736 is to upgrade to Opcenter Quality V13.1.20220624 or V13.2.20220624.

Published Jul 12, 2022

Updated

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.

Affected Software

2 affected components

Siemens Opcenter Quality>=13.1.0<13.1.20220624

Siemens Opcenter Quality>=13.2.0<13.2.20220624

Remediation

Patch Available

https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf

Event History

Jul 12, 2022

CVE Published

via MITRE·10:06 AM

Data Sourced

via MITRE·10:06 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-33736?

The severity of CVE-2022-33736 is high with a CVSS score of 7.5.

Which versions of Opcenter Quality are affected by CVE-2022-33736?

Opcenter Quality versions prior to V13.1.20220624 and V13.2.20220624 are affected by CVE-2022-33736.

What is the CWE ID for CVE-2022-33736?