CVE-2022-30308
published 2022-06-13CVE-2022-30308: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax…
PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.69%
84.0th percentile
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| festo | controller_cecc-x-m1 | — | — |
| festo | controller_cecc-x-m1 | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-mv | — | — |
| festo | controller_cecc-x-m1-mv | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-mv-s1 | — | — |
| festo | controller_cecc-x-m1-mv-s1 | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-mv-s1_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1-mv-s1_firmware | — | — |
| festo | controller_cecc-x-m1-mv_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1-mv_firmware | — | — |
| festo | controller_cecc-x-m1-y-yjkp | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-y-yjkp_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1-ys-l1 | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-ys-l1_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1-ys-l2 | 3.0.0 – 3.8.14 | — |
| festo | controller_cecc-x-m1-ys-l2_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1_firmware | <= 3.8.14 | — |
| festo | controller_cecc-x-m1_firmware | — | — |
| festo | servo_press_kit_yjkp | 3.0.0 – 3.8.14 | — |
| festo | servo_press_kit_yjkp_firmware | <= 3.8.14 | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for POST requests targeting the HTTP endpoints 'cecc-x-web-viewer-request-on', 'cecc-x-web-viewer-request-off', 'cecc-x-acknerr-request', and 'cecc-x-refresh-request' on Festo CECC-X-M1 controllers, particularly those containing shell metacharacters or command injection payloads in the port parameter field. ↗
- →Alert on unauthenticated (no credentials required) remote POST requests to any of the four vulnerable endpoints on Festo CECC-X-M1 family devices; exploitation requires no prior authentication (PR:N, UI:N per CVSS vector). ↗
- ·No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at the time of advisory publication. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q9r7-jm84-gwh8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for p
ghsa_unreviewed·2022-06-14
CVE-2022-30308 [CRITICAL] CWE-78 GHSA-q9r7-jm84-gwh8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for p
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
CISA ICS
FESTO Hardware Controller, Hardware Servo Press Kit
cisa_ics·2025-07-01
FESTO Hardware Controller, Hardware Servo Press Kit
ICS Advisory
##
FESTO Hardware Controller, Hardware Servo Press Kit
Release DateJuly 01, 2025
Alert CodeICSA-25-182-04
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: FESTO
- Equipment: Hardware Controller, Hardware Servo Press Kit
- Vulnerabilities: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized system commands with root privileges.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
FESTO reports the following products are affected:
- Festo
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-06-13
Published