Controller Cecc X M1 (8124922)
Approved changes feed: RSS · Atom
cpe:2.3:a:festo:controller_cecc-x-m1_(8124922):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Festo (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90) |
|---|---|
| Product | Controller Cecc X M1 (8124922) (655dbc38-b321-5d5e-8bc0-e0a5c1f8c493) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30311 |
vulnerable | 2026-06-08 05:43:37.910813 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:24.763Z
Updated: 2024-09-16T23:41:46.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30310 |
vulnerable | 2026-06-08 05:43:37.908706 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:23.105Z
Updated: 2024-11-20T15:21:04.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30309 |
vulnerable | 2026-06-08 05:43:37.906506 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:21.634Z
Updated: 2024-09-16T22:15:41.158Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30308 |
vulnerable | 2026-06-08 05:43:37.888591 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:20.015Z
Updated: 2024-09-16T22:40:02.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.