3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS

🗓️ 30 Nov 2022 07:21:00Reported by The Hacker NewsType

Three new vulnerabilities affecting OT products from German companies Festo and CODESYS could lead to source code tampering and denial-of-service (DoS). The vulnerabilities include insecure-by-design approach, critical Festo automation controllers vulnerability, unauthenticated remote access to undocumented web page, and weak cryptography in CODESYS V3 runtime environment

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2022-31806	23 Jun 202210:00	–	attackerkb
ATTACKERKB	CVE-2022-22515	1 Jun 202210:00	–	attackerkb
BDU FSTEC	The vulnerability of the web interface of the microprogramming software for control blocks Festo CPX-CEC-C1 and CPX-CMXX allows a intruder to trigger a service failure.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Festo products’ microprogramming software, related to insufficient technical documentation, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	23 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PRNG generator in the development environment for programming CODESYS V3 applications, related to the use of cryptographic algorithms with defects, allows a hacker to decrypt and modify the loaded code.	23 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-22515	7 Apr 202222:36	–	circl
Circl	CVE-2022-3079	20 Sep 202214:39	–	circl
Circl	CVE-2022-31806	29 Jun 202202:51	–	circl
Circl	CVE-2022-3270	1 Dec 202209:11	–	circl
Circl	CVE-2022-4048	1 Dec 202209:11	–	circl

30 Nov 2022 09:41Current

1Low risk

Vulners AI Score1

CVSS 26.8

CVSS 3.18.1 - 9.8

EPSS0.0116

SSVC