CVE-2022-33736 Auth bypass in Opcenter Quality V13.1
Unauthenticated attackers can bypass login to access the application or cause denial of service for existing users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-33736?
CVE-2022-33736 is a high-severity authentication bypass vulnerability in Siemens Opcenter Quality V13.1, published on 12 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.
Which versions are affected by CVE-2022-33736?
It affects 1 product.
Products include Siemens Opcenter Quality.
How do I fix CVE-2022-33736?
No fix has been published for CVE-2022-33736 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-33736 being exploited?
There is no known exploitation of CVE-2022-33736 in the wild and no public exploit code.
Other vulnerabilities in Siemens Opcenter Quality V13.1
- CVE-2021-27389 Hardcoded credentials in Opcenter Quality
- CVE-2024-41979 Missing authorization in SOA Audit
- CVE-2023-46283 Memory corruption in Opcenter Execution Foundation
- CVE-2023-46284 Memory corruption in Opcenter Execution Foundation
- CVE-2023-46285 Denial of service in Opcenter Execution Foundation
Sources
Also known as GHSA-m3xw-wjv6-wx6x.