CVE-2022-3270

The CVE-2022-3270 issue affects Festo automation controllers that use the FGMC protocol. A remote, unauthenticated attacker can invoke functions exposed by an undocumented protocol, potentially rebooting devices and causing a complete loss of confidentiality, integrity, and availability (DoS). Re...

CVE-2022-30308

CVE-2022-30308 affects the Festo Controller CECC-X-M1 family. The http-endpoint cecc-x-web-viewer-request-on (and related endpoints) does not validate port syntax in POST requests, enabling unauthorized execution of system commands with root privileges due to improper access control command injec...

CVE-2022-30309

CVE-2022-30309 affects Festo Controller CECC-X-M1 family. The http-endpoint cecc-x-web-viewer-request-off (POST) does not validate port syntax, enabling unauthorized execution of system commands with root privileges due to improper access control command injection. Public discussions and advisori...

CVE-2022-30311

The CVE-2022-30311 vulnerability affects Festo Controller CECC-X-M1 family where the http endpoint cecc-x-refresh-request (and related endpoints) does not validate port syntax in POST requests, enabling unauthorized command execution with root privileges due to improper access control command inj...

CVE-2022-30310

CVE-2022-30310 affects the Festo CECC-X-M1 family. The http-endpoint cecc-x-acknerr-request does not validate port syntax, enabling unauthorized execution of system commands with root privileges via improper access control command injection. Impact is described as remote code execution with root ...