CVE-2022-34660

Name: CVE-2022-34660
Creator: NVD / NIST
Published: 2022-08-10T12:15:12.2+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 1.09%

Last modified Jun 17, 2026

CVE-2022-34660 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. EPSS estimates a 1.09% chance of exploitation in the next 30 days.

Description

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter consist of a functionality that is vulnerable to command injection. This could potentially allow an attacker to perform remote code execution.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

1.09%

61.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-77

Affected Software

Vendor	Product	Versions
Siemens	Teamcenter	>= 12.4, < 12.4.0.15
Siemens	Teamcenter	>= 13.0, < 13.0.0.10
Siemens	Teamcenter	>= 13.1, < 13.1.0.10
Siemens	Teamcenter	>= 13.2, < 13.2.0.9
Siemens	Teamcenter	>= 13.3, < 13.3.0.5
Siemens	Teamcenter	>= 14.0, < 14.0.0.2

References

https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdfMitigation, Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdfMitigation, Vendor Advisory

Timeline

Published: Aug 10, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-34660?

How severe is CVE-2022-34660?

CVE-2022-34660 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.09% probability of exploitation in the next 30 days.

How do I fix CVE-2022-34660?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-34660?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST