festo-didactic.jp Cross Site Scripting vulnerability OBB-3154349

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of Festo products’ microprogramming software, related to insufficient technical documentation, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Festo product’s microprogramming software is related to insufficient technical documentation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2022-3270

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability...

Design/Logic Flaw

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability...

CVE-2022-3270

The CVE-2022-3270 issue affects Festo automation controllers that use the FGMC protocol. A remote, unauthenticated attacker can invoke functions exposed by an undocumented protocol, potentially rebooting devices and causing a complete loss of confidentiality, integrity, and availability (DoS). Re...

CVE-2022-3270 Incomplete Documentation of remote functions in FESTO products.

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability...

CVE-2022-3270 Incomplete Documentation of remote functions in FESTO products.

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability...

Festo 多款产品安全漏洞

Festo product is a range of automation solutions from the German company Festo. A security vulnerability exists in a number of Festo products, which stems from the possibility that an unauthenticated remote attacker could use functions with undocumented protocols, which could result in a complete...

3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS

Researchers have disclosed details of three new security vulnerabilities affecting operational technology OT products from CODESYS and Festo that could lead to source code tampering and denial-of-service DoS. The vulnerabilities, reported by Forescout Vedere Labs, are the latest in a long list of...

Festo Firmware

SUMMARY Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected device "Bus module CPX-E-PN,...

PT-2022-5946 · Festo · Festo Products

Name of the Vulnerable Software and Affected Versions: Festo products affected versions not specified Description: The issue is related to insufficient technical documentation of Festo products' firmware, which could allow a remote unauthenticated attacker to exploit functions of an undocumented...

The vulnerability of the web interface of the microprogramming software for control blocks Festo CPX-CEC-C1 and CPX-CMXX allows a intruder to trigger a service failure.

The vulnerability of the web interface of Festo CPX-CEC-C1 and CPX-CMXX software solutions lies in the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

CVE-2022-3079

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...

CVE-2022-3079

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...

Design/Logic Flaw

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...

CVE-2022-3079 Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...

CVE-2022-3079 Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...

CVE-2022-3079

CVE-2022-3079 affects Festo CPX-CEC-C1 and CPX-CMXX controllers across multiple versions. The vulnerability: unauthenticated, remote access to critical webpage functions (e.g., reboot) via the device’s web interface, potentially causing a denial of service. This is documented across multiple sour...

PT-2022-4837

Name of the Vulnerable Software and Affected Versions Festo control block CPX-CEC-C1 and CPX-CMXX versions affected versions not specified Description The issue is related to the lack of authentication for a critical function in the web interface of the Festo control block CPX-CEC-C1 and CPX-CMXX...

Festo control block CPX-CEC-C1和 CPX-CMXX 安全漏洞

The Festo control block CPX-CEC-C1 and the Festo control block CPX-CMXX are both a control module from Festo, Germany. A security vulnerability exists in multiple versions of Festo that stems from the fact that its control blocks CPX-CEC-C1 and CPX-CMXX allow unauthenticated remote access to...