CVE-2022-31619 Hardcoded credentials in Teamcenter V12.4

Q: Is CVE-2022-31619 being exploited?

There is no known exploitation of CVE-2022-31619 in the wild and no public exploit code.

Q: How do I fix CVE-2022-31619?

No fix has been published for CVE-2022-31619 yet. Limit exposure of the affected software until one is available.

High 8.8 Published 14 Jun 2022 Updated 3 Aug 2024

Hardcoded credentials in Teamcenter's Java EE Server Manager allow attackers to gain elevated permissions and execute remote code.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-31619?

CVE-2022-31619 is a high-severity vulnerability in Siemens Teamcenter V12.4, published on 14 Jun 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.3), Teamcenter V14.0 (All versions < V14.0.0.2). Java EE Server Manager HTML Adaptor in Teamcenter consists of default hardcoded credentials. Access to the application allows a user to perform a series of actions that could potentially lead to remote code execution with elevated permissions.

Weakness: CWE-798

Which versions are affected by CVE-2022-31619?

It affects 1 product.

Products include Siemens Teamcenter.

How do I fix CVE-2022-31619?

No fix has been published for CVE-2022-31619 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-31619 being exploited?

There is no known exploitation of CVE-2022-31619 in the wild and no public exploit code.

Sources

Also known as GHSA-fc5j-w57x-fv6j.