Festo CECX X C1 Modular Master Controller With Codesys vulnerabilities

4 vulnerabilities

Known vulnerabilities in Festo CECX X C1 Modular Master Controller With Codesys, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CriticalCVE-2014-07603s-software · codesys_runtime_system +5 moreFesto CECX-X-(C1/M1) Controller Improper AuthenticationThe Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.EPSS3.35%9.3CriticalCVE-2014-07693s-software · codesys_runtime_system +5 moreFesto CECX-X-(C1/M1) Controller Improper AuthenticationThe Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.EPSS2.32%10CriticalCVE-2012-60693s-smart software solutions · codesys control rte +5 more3S CoDeSys Relative Path TraversalThe CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.EPSS2.64%10CriticalCVE-2012-60683s-smart software solutions · codesys control rte +5 more3S CoDeSys Improper Access ControlThe Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.EPSS5.27%