Approved changes feed: RSS · Atom

cpe:2.3:o:festo:controller_cecc-s_firmware:2.3.8.1:*:*:*:*:*:*:*

part: o version: 2.3.8.1 update: *

VendorFesto (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90)
ProductController Cecc S Firmware (bb21aca3-5c35-5ccd-b358-7e5e3ed9f347)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12069 vulnerable 2026-06-08 05:17:56.348156 CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.