Festo Controller Cecc-X-M1 vulnerabilities
4 known vulnerabilities affecting festo/controller_cecc-x-m1.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4
Vulnerabilities
Page 1 of 1
CVE-2022-30309P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.8.14v4.0.142022-06-13
CVE-2022-30309 [CRITICAL] CWE-78 CVE-2022-30309: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-vie
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
nvd
CVE-2022-30311P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.8.14v4.0.142022-06-13
CVE-2022-30311 [CRITICAL] CWE-78 CVE-2022-30311: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
nvd
CVE-2022-30308P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.8.14v4.0.142022-06-13
CVE-2022-30308 [CRITICAL] CWE-78 CVE-2022-30308: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-vie
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
nvd
CVE-2022-30310P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.8.14v4.0.142022-06-13
CVE-2022-30310 [CRITICAL] CWE-78 CVE-2022-30310: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
nvd