CVE-2022-33736: siemens opcenter_quality
Vulnerability summary
CVE-2022-33736 is a high (CVSS 7.5) vulnerability in siemens opcenter_quality. EPSS estimates a 1.32% chance of exploitation in the next 30 days, higher than 70.4% of scored vulnerabilities.
Timeline
- 12-07-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.32%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
+0.04 pp
From 1.29% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-303Incorrect Implementation of Authentication AlgorithmThe requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Siemens3 products
- opcenter_quality≥ 13.1.0, < 13.1.20220624 | ≥ 13.2.0, < 13.2.20220624
- opcenter quality v13.1All versions < V13.1.20220624
- opcenter quality v13.2All versions < V13.2.20220624
1 vendor · 3 products