Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-0769

Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.

CVSS 2.0 · 9.3 Critical EPSS 2.3% KEV · Not listed
Vendors
3s-software Festo Softmotion3d
Products
Codesys Runtime System Cecx-x-c1 Modular Master Controller Cecx-x-m1 Modular Controller and 1 more
CVE-2014-0760

Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 3.3% KEV · Not listed
Vendors
3s-software Festo Softmotion3d
Products
Codesys Runtime System Cecx-x-c1 Modular Master Controller Cecx-x-m1 Modular Controller and 1 more