Festo Servo Press Kit YJKP (8077950) vulnerabilities
4 vulnerabilities
Known vulnerabilities in Festo Servo Press Kit YJKP (8077950), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-30309festocontroller_cecc-x-m1_firmware+18
EPSS score2.92%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.CVE-2022-30310festocontroller_cecc-x-m1_firmware+18EPSS score2.69%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.CVE-2022-30308festocontroller_cecc-x-m1_firmware+18EPSS score2.92%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.CVE-2022-30311festocontroller_cecc-x-m1_firmware+18EPSS score2.69%
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.