Improper authentication in Siemens Opcenter Quality V13.1
Priority LOW 36CWE-303Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.
Why it matters now
EPSS 0.01323 71st percentileScored 2026-11-07
Fix Fixed Opcenter Quality V13.1 (Siemens): V13.1.20220624Opcenter Quality V13.2 (Siemens): V13.2.20220624
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Opcenter Quality V13.1 | before V13.1.20220624 | V13.1.20220624 | Patch available | CNA |
| Siemens | Opcenter Quality V13.2 | before V13.2.20220624 | V13.2.20220624 | Patch available | CNA |
- Opcenter Quality V13.1 VendorSiemens Affected before V13.1.20220624 Fixed in V13.1.20220624 Patch available CNA
- Opcenter Quality V13.2 VendorSiemens Affected before V13.2.20220624 Fixed in V13.2.20220624 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:* | 13.1.0 to before 13.1.20220624; 13.2.0 to before 13.2.20220624 | Vulnerable | Siemens |
- cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:* Versions 13.1.0 to before 13.1.20220624; 13.2.0 to before 13.2.20220624 Vulnerable ·Siemens
Remediation
- Fix · CNA Opcenter Quality V13.1 (Siemens) Fixed in V13.1.20220624
- Fix · CNA Opcenter Quality V13.2 (Siemens) Fixed in V13.2.20220624
Timeline
- 2026-10-02 Threatist record created from CVE-2022-33736
- 2026-10-03 Alias added: GHSA-m3xw-wjv6-wx6x
References
More Siemens Opcenter Quality vulnerabilities
- TI-2021-08882 A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS… CVSS 3.1CRITICAL 9.8
- TI-2023-24902 A vulnerability has been identified in Opcenter Execution Foundation (All versions <… CVSS 3.1HIGH 8.8
- TI-2023-24906 Improper input validation in Siemens Opcenter Execution Foundation CVSS 3.1HIGH 7.5
- TI-2023-24905 Buffer overflow in Siemens Opcenter Execution Foundation CVSS 3.1HIGH 7.5
- TI-2020-06109 Uncontrolled resource consumption in Siemens Opcenter Execution Discrete CVSS 3.1HIGH 8.2
- TI-2023-24904 Buffer overflow in Siemens Opcenter Execution Foundation CVSS 3.1HIGH 7.5
Sources
- CVE-2022-33736 · CVE Program
- CVE-2022-33736 · NVD
- FIRST EPSS
- GHSA-m3xw-wjv6-wx6x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences