Festo Controller Cecc D vulnerabilities

2 vulnerabilities

Known vulnerabilities in Festo Controller Cecc D, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64
EPSS score
0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.9.8CVE-2022-3270festo sebus module cpx-e-ep+153
EPSS score
1.09%
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.