AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-41648

CRITICAL · CVSS 9.8 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-28 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2022-41648
Severity
CRITICAL
CVSS
9.8
EPSS
0.70%

Original NVD Description

The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CNC machines. Authentication is not enabled by default for DNC communication. This vulnerability may allow an attacker to deny service on the production line, steal sensitive data from the production line, and alter any products created by the production line. Note: CNC machines running the TNC 640 controller require DNC to be enabled for DNC communication to be present.