In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HFesto Bus Module Cpx E Ep
HWFestoall versionsFesto Bus Module Cpx E Ep Firmware
OSFestoall versionsFesto Bus Node Cpx Fb32
HWFestoall versionsFesto Bus Node Cpx Fb32 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb33
HWFestoall versionsFesto Bus Node Cpx Fb33 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb36
HWFestoall versionsFesto Bus Node Cpx Fb36 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb37
HWFestoall versionsFesto Bus Node Cpx Fb37 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb39
HWFestoall versionsFesto Bus Node Cpx Fb39 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb40
HWFestoall versionsFesto Bus Node Cpx Fb40 Firmware
OSFestoall versionsFesto Bus Node Cpx Fb43
HWFestoall versionsFesto Bus Node Cpx Fb43 Firmware
OSFestoall versionsFesto Bus Node Cpx M Fb34
HWFestoall versionsFesto Bus Node Cpx M Fb34 Firmware
OSFestoall versionsFesto Bus Node Cpx M Fb35
HWFestoall versionsFesto Bus Node Cpx M Fb35 Firmware
OSFestoall versionsFesto Bus Node Cpx M Fb44
HWFestoall versionsFesto Bus Node Cpx M Fb44 Firmware
OSFestoall versionsFesto Bus Node Cpx M Fb45
HWFestoall versionsFesto Bus Node Cpx M Fb45 Firmware
OSFestoall versionsFesto Bus Node Cteu Ep
HWFestoall versionsFesto Bus Node Cteu Ep Firmware
OSFestoall versionsFesto Bus Node Cteu Pn
HWFestoall versionsFesto Bus Node Cteu Pn Ex1c
HWFestoall versionsFesto Bus Node Cteu Pn Ex1c Firmware
OSFestoall versionsFesto Bus Node Cteu Pn Firmware
OSFestoall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
Related vulnerabilities
CVE-2022-30308CRITICAL9.8PL ✓same product
Command Injection z uprawnieniami root w Festo Controller CECC-X-M1
CVE-2022-30309CRITICAL9.8PL ✓same product
Command injection z uprawnieniami root w Festo Controller CECC-X-M1
CVE-2022-30310CRITICAL9.8PL ✓same product
Command injection z uprawnieniami root w Festo Controller CECC-X-M1
CVE-2022-30311CRITICAL9.8PL ✓same product
Command injection w Festo Controller CECC-X-M1 — RCE z uprawnieniami root
CVE-2020-12069HIGH7.8same product
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime ...