Description
Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FESTO | Control block CPX-CEC-C1 (no. 567347) | 0.0.1 – ≤ 2.0.12 | — |
| FESTO | Control block CPX-CMXX (no. 555667) | 0.0.1 – ≤ 1.2.34 rev.269404 | — |
Advisories 2
- ICSA-25-273-03 Festo CPX-CEC-C1 and CPX-CMXX CISA ICS & IT advisories · Jul 28, 2025
- FSA-202207 Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function CERT@VDE · Jul 28, 2025