Festo records

9 published records for vendor festo.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-30309No exploit	FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerabilityfesto · controller cecc-x-m1 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.9%	Jun 13, 2022
40Plan	CVE-2022-30308No exploit	FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerabilityfesto · controller cecc-x-m1 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.9%	Jun 13, 2022
40Plan	CVE-2022-30311No exploit	FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerabilityfesto · controller cecc-x-m1 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.7%	Jun 13, 2022
40Plan	CVE-2022-30310No exploit	FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerabilityfesto · controller cecc-x-m1 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.7%	Jun 13, 2022
39Monitor	CVE-2022-3270No exploit	Incomplete Documentation of remote functions in FESTO products.festo · bus module cpx-e-ep firmware · CWE-1059 Pre-auth	Critical9.8	—	1.0%	Dec 1, 2022
38Monitor	CVE-2014-0760No exploit	Festo CECX-X-(C1/M1) Controller Improper Authenticationfesto · cecx-x-c1 modular master controller · CWE-287 pre-auth RCE Auth bypass	Critical9.3	—	3.3%	Apr 25, 2014
38Monitor	CVE-2014-0769No exploit	Festo CECX-X-(C1/M1) Controller Improper Authenticationfesto · cecx-x-m1 modular controller · CWE-287 Pre-auth Auth bypass	Critical9.3	—	2.3%	Apr 25, 2014
31Monitor	CVE-2020-12069No exploit	CODESYS V3 prone to Inadequate Password Hashingcodesys · control for beaglebone · CWE-916 Local privilege escalation	High7.8	—	0.1%	Dec 26, 2022
30Monitor	CVE-2022-3079No exploit	Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Functionfesto · cpx-cmxx firmware · CWE-269 Pre-auth Auth bypass Denial of service	High7.5	—	0.7%	Sep 20, 2022

CVE-2022-30309
40Plan
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
festo · controller cecc-x-m1 firmwareJun 13, 2022
CVE-2022-30308
40Plan
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
festo · controller cecc-x-m1 firmwareJun 13, 2022
CVE-2022-30311
40Plan
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
festo · controller cecc-x-m1 firmwareJun 13, 2022
CVE-2022-30310
40Plan
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
festo · controller cecc-x-m1 firmwareJun 13, 2022
CVE-2022-3270
39Monitor
Incomplete Documentation of remote functions in FESTO products.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
festo · bus module cpx-e-ep firmwareDec 1, 2022
CVE-2014-0760
38Monitor
Festo CECX-X-(C1/M1) Controller Improper Authentication
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Auth bypass
festo · cecx-x-c1 modular master controllerApr 25, 2014
CVE-2014-0769
38Monitor
Festo CECX-X-(C1/M1) Controller Improper Authentication
CriticalCVSS 9.3No exploitEPSS 2%
- Pre-auth
- Auth bypass
festo · cecx-x-m1 modular controllerApr 25, 2014
CVE-2020-12069
31Monitor
CODESYS V3 prone to Inadequate Password Hashing
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
codesys · control for beagleboneDec 26, 2022
CVE-2022-3079
30Monitor
Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function
HighCVSS 7.5No exploitEPSS 0%
festo · cpx-cmxx firmwareSep 20, 2022