CVE-2022-41648 Auth bypass in HEIDENHAIN Controller TNC 640 NC Software
Attackers can bypass authentication in DNC communication to disrupt production, steal data, or alter products if DNC is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-41648?
CVE-2022-41648 is a critical authentication bypass vulnerability in HEIDENHAIN Controller TNC 640 NC Software, published on 28 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CNC machines. Authentication is not enabled by default for DNC communication. This vulnerability may allow an attacker to deny service on the production line, steal sensitive data from the production line, and alter any products created by the production line. Note: CNC machines running the TNC 640 controller require DNC to be enabled for DNC communication to be present.
Which versions are affected by CVE-2022-41648?
It affects 2 products.
Products include Heidenhain Heros, Heidenhain Tnc 640 Programming Station.
How do I fix CVE-2022-41648?
No fix has been published for CVE-2022-41648 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-41648 being exploited?
There is no known exploitation of CVE-2022-41648 in the wild and no public exploit code.
Sources
Also known as GHSA-jc9h-j7vp-j9jw.