Controller Cecc X M1 Y Yjkp Firmware

controller_cecc-x-m1-y-yjkp_firmware

Vendor: Festo • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3270 1Festo 99Bus Module Cpx E Ep Firmware Bus Node Cpx Fb32 FirmwareBus Node Cpx Fb33 Firmware+96 more Jun 17, 2026 Dec 1, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
CVE-2022-30311 1Festo 8Controller Cecc X M1 Mv S1 Firmware Controller Cecc X M1 Mv FirmwareController Cecc X M1 Y Yjkp Firmware+5 more Jun 17, 2026 Jun 13, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with...Show more In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.Show less
CVE-2022-30310 1Festo 8Controller Cecc X M1 Mv S1 Firmware Controller Cecc X M1 Mv FirmwareController Cecc X M1 Y Yjkp Firmware+5 more Jun 17, 2026 Jun 13, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with...Show more In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.Show less
CVE-2022-30309 1Festo 8Controller Cecc X M1 Mv S1 Firmware Controller Cecc X M1 Mv FirmwareController Cecc X M1 Y Yjkp Firmware+5 more Jun 17, 2026 Jun 13, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system command...Show more In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.Show less
CVE-2022-30308 1Festo 8Controller Cecc X M1 Mv S1 Firmware Controller Cecc X M1 Mv FirmwareController Cecc X M1 Y Yjkp Firmware+5 more Jun 17, 2026 Jun 13, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands...Show more In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.Show less