Skip to content
OpenAdvisories
Critical ICSA-26-015-02 1 CVE

Festo Firmware

Published Nov 29, 2022 · Updated Jan 14, 2026 · Revision 5

Vendor: Festo Product: Bus module CPX-E-EP Product: Bus module CPX-E-PN Product: Bus node CPX-FB32 Product: Bus node CPX-FB33 Product: Bus node CPX-FB36 Product: Bus node CPX-FB37 Product: Bus node CPX-FB39 Product: Bus node CPX-FB40 Product: Bus node CPX-FB43 Product: Bus node CPX-M-FB34 Product: Bus node CPX-M-FB35 Product: Bus node CPX-M-FB44 Product: Bus node CPX-M-FB45 Product: Bus node CTEU-EP Product: Bus node CTEU-PN Product: Bus node CTEU-PN-EX1C Product: Camera system CHB-C-N Product: Compact Vision System SBO*-C-* Product: Compact Vision System SBO*-M-* Product: Compact Vision System SBO*-Q-* Product: Control block CPX-CEC Product: Control block CPX-CEC-C1 Product: Control block CPX-CEC-C1-V3 Product: Control block CPX-CEC-M1 Product: Control block CPX-CEC-M1-V3 Product: Control block CPX-CEC-S1-V3 Product: Control block CPX-CMXX Product: Control block CPX-FEC-1-IE Product: Controller CECC-D +26 more

Summary

Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent.
Update A, 2022-12-13
Added affected device "Bus module CPX-E-PN, 4080497"

Details

Impact
Please consult the CVE details above.

Mitigation
Update of technical user manual documentation in next product version.

Vulnerabilities 1

Revision history

  1. #5

    Initial Republication of Festo SE & Co. KG FSA-202209 advisory

  2. #4

    Adjust link to VDE Advisory. Change title from "Incomplete User Documentation of Remote Accessible Functions and Protocols in Festo Products" to "Festo: Incomplete documentation of remote accessible functions and protocols in Festo products". Updated legal disclaimer to add references to special provisions.

  3. #3

    adjusted technical user documentation to user documentation and fixed some typos.

  4. #2

    added bus module CPX-E-PN as affected product

  5. #1

    Initial revision.

References