Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-30311

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Festo
Products
Controller Cecc-x-m1 Controller Cecc-x-m1-mv Controller Cecc-x-m1-mv-s1 and 13 more
CVE-2022-30310

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Festo
Products
Controller Cecc-x-m1 Controller Cecc-x-m1-mv Controller Cecc-x-m1-mv-s1 and 13 more
CVE-2022-30309

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Festo
Products
Controller Cecc-x-m1 Controller Cecc-x-m1-mv Controller Cecc-x-m1-mv-s1 and 13 more
CVE-2022-30308

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Festo
Products
Controller Cecc-x-m1 Controller Cecc-x-m1-mv Controller Cecc-x-m1-mv-s1 and 13 more