HIGH🇵🇱 Wersja polska

CVE-2014-0769

CVSS 9.3v2.0pub. 2014-04-25upd. 2026-05-06

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.

CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C

  • 3s Software Codesys Runtime System

    APP
    3S-Software
    all versions

  • Festo Cecx X C1 Modular Master Controller

    HW
    Festo
    all versions

  • Festo Cecx X M1 Modular Controller

    HW
    Festo
    all versions

  • Softmotion3d Softmotion

    APP
    Softmotion3D
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-3270CRITICAL9.8PL ✓same product

Festo CPX: nieudokumentowany protokół umożliwia pełne przejęcie urządzenia

CVE-2018-5440CRITICAL9.8PL ✓same product

Stack-based Buffer Overflow w CODESYS Web Server — możliwe RCE

CVE-2012-6068CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w CODESYS Runtime System umożliwia zdalne wykonanie poleceń

CVE-2012-6069CRITICAL10.0PL ✓same product

Path Traversal w CoDeSys Runtime Toolkit — nieograniczony dostęp do plików

CVE-2014-0760HIGH9.3same product

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and ...