Festo Controller Cecc X M1 Mv vulnerabilities

5 vulnerabilities

Known vulnerabilities in Festo Controller Cecc X M1 Mv, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2022-30309festocontroller_cecc-x-m1_firmware+18
EPSS score
2.92%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.10CVE-2022-30310festocontroller_cecc-x-m1_firmware+18
EPSS score
2.69%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.10CVE-2022-30308festocontroller_cecc-x-m1_firmware+18
EPSS score
2.92%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.10CVE-2022-30311festocontroller_cecc-x-m1_firmware+18
EPSS score
2.69%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.9.8CVE-2022-3270festo sebus module cpx-e-ep+153
EPSS score
1.09%
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.