Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-0769

Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.

CVSS 2.0 · 9.3 Critical EPSS 2.3% KEV · Not listed
Vendors
3s-software Festo Softmotion3d
Products
Codesys Runtime System Cecx-x-c1 Modular Master Controller Cecx-x-m1 Modular Controller and 1 more
CVE-2014-0760

Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 3.3% KEV · Not listed
Vendors
3s-software Festo Softmotion3d
Products
Codesys Runtime System Cecx-x-c1 Modular Master Controller Cecx-x-m1 Modular Controller and 1 more
CVE-2022-3270

Incomplete Documentation of remote functions in FESTO products.

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Festo
Products
Bus Module Cpx-e-ep Bus Module Cpx-e-ep Firmware Bus Node Cpx-fb32 and 195 more