Controller Cecc X M1 Mv S1 (8124924)
Approved changes feed: RSS · Atom
cpe:2.3:a:festo:controller_cecc-x-m1-mv-s1_(8124924):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Festo (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90) |
|---|---|
| Product | Controller Cecc X M1 Mv S1 (8124924) (6d045a5b-002a-5b7d-a2a2-3b7a5c8a4715) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30311 |
vulnerable | 2026-06-08 05:43:37.910902 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:24.763Z
Updated: 2024-09-16T23:41:46.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30310 |
vulnerable | 2026-06-08 05:43:37.908962 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:23.105Z
Updated: 2024-11-20T15:21:04.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30309 |
vulnerable | 2026-06-08 05:43:37.906591 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:21.634Z
Updated: 2024-09-16T22:15:41.158Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30308 |
vulnerable | 2026-06-08 05:43:37.891075 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:20.015Z
Updated: 2024-09-16T22:40:02.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.