Festo

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Festo records in CISA KEV

No Festo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Controller Cecc-x-m1-mv-s1 Firmware 5 records MEDIUM Controller Cecc-x-m1-mv Firmware 5 records MEDIUM Controller Cecc-x-m1-y-yjkp Firmware 5 records MEDIUM Controller Cecc-x-m1-ys-l1 Firmware 5 records MEDIUM Controller Cecc-x-m1-ys-l2 Firmware 5 records MEDIUM Controller Cecc-x-m1 Firmware 5 records MEDIUM Servo Press Kit Yjkp- Firmware 4 records MEDIUM Servo Press Kit Yjkp Firmware 4 records MEDIUM

Records

4 records in Servo Press Kit Yjkp Firmware · all components

TI-2022-12545 CVE-2022-30310 · GHSA-xm7p-h8qq-9g6j

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

MEDIUM 54

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02722 Published 2022-06-13 No fix listed CWE-78

TI-2022-12546 CVE-2022-30311 · GHSA-v8cv-ch4w-445w

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

MEDIUM 47

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02722 Published 2022-06-13 No fix listed CWE-78

TI-2022-12544 CVE-2022-30309 · GHSA-xm2r-2g3f-xg38

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

MEDIUM 47

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02959 Published 2022-06-13 No fix listed CWE-78

TI-2022-12543 CVE-2022-30308 · GHSA-q9r7-jm84-gwh8

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

MEDIUM 47

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02959 Published 2022-06-13 No fix listed CWE-78

Open these records in search →

Critical	9
High	3
Medium	0
Low	0
No CVSS	0