CVE-2022-34660: A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10),…

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.2% · higher than 68% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

TV

Teamcenter V12.4 · Siemens

All versions < V12.4.0.15 · source: vendor

TV

Teamcenter V13.0 · Siemens

All versions < V13.0.0.10 · source: vendor

TV

Teamcenter V13.1 · Siemens

All versions < V13.1.0.10 · source: vendor

TV

Teamcenter V13.2 · Siemens

All versions < V13.2.0.9 · source: vendor

TV

Teamcenter V13.3 · Siemens

All versions < V13.3.0.5 · source: vendor

TV

Teamcenter V14.0 · Siemens

All versions < V14.0.0.2 · source: vendor

TE

Teamcenter · Siemens

12.4 before 12.4.0.15; 13.0 before 13.0.0.10; 13.1 before 13.1.0.10; 13.2 before 13.2.0.9; 13.3 before 13.3.0.5; 14.0 before 14.0.0.2 · source: NVD