Festo

9 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-3270

  Incomplete Documentation of remote functions in FESTO products.

  In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

  Festo Bus node CPX-FB39 Control block CPX-CEC-M1 Gateway CPX-IOT
  Dec 1, 2022
• Critical 9.8
  CVE-2022-30311

  FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …

  Festo Controller CECC-X-M1-MV (8124923) Controller CECC-X-M1-MV-S1 (8124924) Controller CECC-X-M1-YS-L2 (8082794)
  Jun 13, 2022
• Critical 9.8
  CVE-2022-30310

  FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access …

  Festo Controller CECC-X-M1-YS-L2 (8082794) Controller CECC-X-M1 (4407603) Servo Press Kit YJKP (8077950)
  Jun 13, 2022
• Critical 9.8
  CVE-2022-30309

  FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper …

  Festo Controller CECC-X-M1-Y-YJKP (4803891) Controller CECC-X-M1 (8124922) Servo Press Kit YJKP- (8058596)
  Jun 13, 2022
• Critical 9.8
  CVE-2022-30308

  FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper a…

  Festo Controller CECC-X-M1-MV-S1 (4407606) Controller CECC-X-M1-YS-L1 (8082793) Controller CECC-X-M1-Y-YJKP (4803891)
  Jun 13, 2022
• Critical 9.3
  CVE-2014-0769

  Festo CECX-X-(C1/M1) Controller Improper Authentication

  The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a req…

  Festo CECX-X-C1 Modular Master Controller with CoDeSys CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
  Apr 25, 2014
• Critical 9.3
  CVE-2014-0760

  Festo CECX-X-(C1/M1) Controller Improper Authentication

  The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a …

  Festo CECX-X-M1 Modular Controller with CoDeSys and SoftMotion CECX-X-C1 Modular Master Controller with CoDeSys
  Apr 25, 2014
• Critical 10.0
  CVE-2012-6069

  3S CoDeSys Relative Path Traversal

  The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This co…

  Festo 3S-Smart Software Solutions CECX-X-C1 Modular Master Controller with CoDeSys CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
  Jan 21, 2013
• Critical 9.8
  CVE-2012-6068

  3S CoDeSys Improper Access Control

  The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener serv…

  Festo 3S-Smart Software Solutions CECX-X-M1 Modular Controller with CoDeSys and SoftMotion CECX-X-C1 Modular Master Controller with CoDeSys
  Jan 21, 2013