CVE-2022-2052

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Oct 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-205207.8In onCreate of various files, there is a possible tapjacking/overlay attack. This could lead to local escalation of privilege or denial of s CVE-2022-205215.0In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could CVE-2022-205227.8In getSlice of ProviderModelSlice.java, there is a missing permission check. This could lead to local escalation of privilege from the guest CVE-2022-205235.5In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to CVE-2022-205247.8In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of pri CVE-2022-205253.3In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissio CVE-2022-205263.3In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local CVE-2022-205275.5In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information CVE-2022-205283.3In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of p CVE-2022-205292.4In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could CVE-2022-20537.5When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit im CVE-2022-205305.3In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call l