Skip to content
OpenAdvisories
High FSA-202207 1 CVE

Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function

Published Sep 20, 2022 · Updated Jul 28, 2025 · Revision 4

Vendor: Festo Product: Control block CPX-CEC-C1 Product: Control block CPX-CMXX Product: Control block-SET CPX-CEC-C1

Summary

Unauthenticated access to critical webpage functions (e.g. reboot) may cause a denial of service of the device.

Details

Impact
CPX-CEC-C1 and CPX-CMXX allow unauthenticated access to critical webpage functions (e.g. reboot) which may cause a denial of service of the device

Remediation
Currently no fix is planned.
Replace CPX-CEC-C1 with follow-up product CPX-CEC-C1-V3.
Replace CPX-CMXX with follow up product CPX-CEC-M1-V3.

Vulnerabilities 1

Revision history

  1. #1.1.2

    Adjusted to VDE template. Change title from 'CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function' to 'Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function'. Updated legal disclaimer to add references to special provisions. Remediations were consolidated into one.

  2. #1.1.1

    Adjust link to VDE Advisory

  3. #1.1.0

    Added Control block-Set CPX-CEC-C1 and Control block-SET CPX-CMXX to affected products.

  4. #1.0.0

    Initial revision.

References